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ABSTRACT 


The purpose of this research is to show the feasibility 
of an expert system that utilizes the existing sensors 
aboard an aircraft to aid the pilot in the diagnosis of 
Single and compound emergencies. A passive expert planner is 
proposed that utilizes multiple and domain dependent 
knowledge-bases. The system is implemented on a personal 
computer, using the USMC AH-1T attack helicopter as a 
modeling platform. An effort is made to quantify the amount 
of information processing necessary to adequately define 


emergencies. Performance of the system was also evaluated. 


THESIS DISCLAIMER 


The reader is cautioned that computer programs developed 


in this research may not have been exercised for all cases 


of interest. While every effort 
time available, to ensure that 
computational and logic errors, 

validated. Any application of 


additional verification is at the 


has been made, within the 
the programs are free of 
they cannot be considered 

these programs without 


risk of the user. 
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I. INTRODUCTION 


A. BACKGROUND 

Future systems will provide the pilot with information 
rather than raw data. This information will probably be 
presented to the pilot in the form of situation reporting, 
presentation of the options, and probabilities connected 
with various courses of action [{Ref. 1: p. 28). James A. 
Guffy, unit chief, Advanced AI Technology Concepts, stated 
[Ret. 27 Oe 6o1: 


The way it stands now, a pilot is often drowning in 


data Dut is starved tor information, That's the problem 
the Pilot's Associate program was created to 
address. Its role is to increase the pilot's decision- 


making capability and improve mission effectiveness. 

The need for an improved decision-making capability is 
evident from aircraft accident statistics. The cause/factor 
elements involved in aircraft accidents may be grouped into 
three general categories: 

( 1 ) Environmental extreme. 
( 2 ) Material failure. 
( 3 ) Human error. 

Environmental extremes are usually external to the 
cockpit and beyond the pilot's control. Material failures 
are hardware malfunctions and structural failures. Human 


errors are procedural and judgmental errors, not necessarily 


by the pilot. Errors on the part of the designer or air 


traffic controller are certainly human. However, pilot error 
is cited most often [Ref 3: p.13]. 

Human(pilot) errors can be partitioned into five 
categories (Ref 4: p.7)}: 

( 1 ) Retroactive Interference - The action of the 
individual is not identified with the problem at 
hand. This is motivated by an assimilation of prior 
input into an ongoing proaram. 

( 2 ) Reductive Coding - An overload of input or a complex 


stages ot events, precludes the correct handling oft 
the situation. 


( 3.) Psychological Refractory Phase - The numan unit 
receives the input. However, a Simuitaneous 
Eransterence of this information does not occur. 
There is a seqment of time between the input and 


outout, leaving a window open to information loss or 
opersonai interpoiation of an event or incoming data. 


( 4) Inferential Shortcomings - Aodplication or Knowledge 
structures anaqd heuristics to a situation Lao 
SuUppOSleEvonecr Cata wnich is non-existenc... In short 


human error due to assumption. 

( 5 ) Leadership and Crew Coordination - Protocol and the 
social hierarchy of the aircraft are examined in 
reference to their role in the cockpit environment. 


A single element or a combination of these elements could 
invoke an error. 


The pilot of an aircraft is tasked with monitoring many 
Gauges in the cockpit. A system such as the one _ proposed 
could improve pilot effectiveness to some degree in all five 
categories listed above, particularly in the areas of 
reductive coding and inferential shortcomings. The system 
continuously monitors the gauges and is kept abreast of the 
aircraft systems they represent. In case of an emergency, 


any problem that is presented to the pilot is also presented 


to the system. Recommended actions are returned to the 


pilot, by the system, for cross reference or confirmation. 


B. OBJECTIVE 

The overall objective is to raise to a higher level of 
abstraction the real-time performance data available to the 
pilot, utilizing artificiat intelligence m@ivee in cues] sc 
objectives in particular are as follows: 

( 1 ) Show that useful information can be provided to the 
pilot, in terms of procedural recommendations and 
diagnosis, rapidly with the existing sensor input. 

( 2 ) Quantify, Ehrough implementation, Ene amount of 
information processing necessary to sufficiently 


define the aircraft emergencies (Ref 5: p.2}. 


( 3} Snow the éeasibilityv o£ a svstem with mulitipie 
knowleddge bases. 


( 4 ) Show that means-ends analysis is an appropriate 
problem solving formalism on which to solve the 
problem. 

C. SCOPE 

This system is implemented around the United States 
Marine Corps wie helicopter. It demonstrates the ability 
of this problem solving paradigm to diagnose compound 
aircraft emergencies and present recommendations to the 
pilot, in the context of the objectives stated above. Twenty 


categories of inflight emergencies, for the AH-1T, are 


The AH-1T is a tandem seat, two place (pilot and 
copilot/gunner) twin engine attack helicopter manufactured 
by Bell Helicopter Textron. 
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HF 
listed in the NATOPS Flight Manual One category, engine 


malfunctions, is concentrated on. 


D. ASSUMPTIONS 
Three assumptions have been made to simplify 
implementation: 


( 1) No discrepancies exist between the gauges) and 
| caution lights. Caution lights illuminate to show 
fault conditions. They are housed together in a 
cluster called a master caution panel. It is 
assumed that these lights are not faulty. 


ez.) Ari indications presented to the pilot are 
correct. As a result of this, no emergency is 
caused by a faulty gauge. 


( 3) The aircraft is operating in the high altitude 
environment. 


BE. MATERIALS AND EQUIPMENT 
The design was implemented in Turbo Prolog [Ref.6 p.1] 


on an IBM AT computer. 


The NATOPS Flight Manual is issued by the authority of 
the Chief of Naval Operations and under the direction of 
Commander, Naval Air Systems Command in conjunction with the 
Naval Air Training and Operating Procedures Standardization 
(NATOPS) Program. This manual standardizes ground and flight 
procedures based on professional knowledge and experience. 
Compliance with this manual is mandatory except where stated 
within the manual. 
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II. SUMMARY OF CURRENT KNOWLEDGE 


A. INDUSTRY 

Substantial emphasis in AI developments to date has 
remained in the military/industrial area. 

Accelerating activity in artificial intelligence and 
expert systems is pressing researchers to take a long look 
ahead toward real-world applications in a variety of 
aerospace systems, where the technology holds promise of 
enhancing human capabilities. [Ref 2: p.40]} 

One major driver is the funding and research base 
provided by the Defense Advanced Research Projects Agency's 
(DARPA) Strategic Computing Initiative and, more 
specifically, particular areas targeted by DARPA for initial 
technology applications [Ref.7 p. 46]. 

1. Pilot Aids 

Development of the Pilot's Associate, an 
intelligent, personalized airborne system, has moved ahead 
Significantly with award of three-year Phase 1 contracts’ to 
two industry teams headed by lLockheed-Georgia Co. and 
McDonnell Aircraft Co. [Ref.8 p. 34]. Initially, it will 


consist of four interactive expert systems [Ref.4: p.47]: 


(1) A Situation Assessment Manager to assess’ the 
external environment as well as internal resources. 


( 2) A Tactical Planning Manager to recommend optimum 
tactical employment of the aircraft, given mission 
objectives and restrictions. 


( 39) -@ Mission Planning Manager to refine and redefine 
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mission objectives, Given current situation, 
command, and intelligence inputs. 


( 4) A System Status Manager to monitor and diagnose 
total system health and current/projected status 
of all on-board systems. 

Texas Instruments research included development of an 
emergency procedures expert system (EPES), focusing on 
a@aiding pilots of USAF/General Dynamics F-165 fighters in 
certain multiple emergency situations [Rer.9 p.89]. 

2. Maintenance &Exvert System 

McDonneli Douglas Aixrcraét Corp. nas conducted 
flight cests of an avionics integrated (AIMES) maintenance 
expert system aboard a Navy/Mcdoenne!l SOouglas F/A-18. Duriag 
Operation, AiMES monitors the aircraft's mission computezs 
Poe a¥Viecnics failure indications and records general data 
from suspect avionic boxes. The expert system then generates 
queries based upon the general data. Tests are performed by 
the system to determine the validity of the queries and a 
conclusion concerning the failure is’ reached. During 
interrogation the system can provide the fault data, name 
the avionics card that has failed, and detail the reasoning 
that lead to the fanlt isolation conclusion [Ref.2 p.69). 

3. Space Station Operations 

The Boeing Aerospace Co. is addressing expert 
systems in space station operations, and expert systems as 


pilot decision aids. Expert systems development for the 


manned space station is focused on the automation of 
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housekeeping functions, one of which is electrical power 
control, with emphasis on fault detection and isolation and 
energy management. The system is optimized for diagnosing 
multiple or simultaneous faults. In pilot decision aids, 
Boeing is applying expert systems technology to the 
Dictorial format cockpit display it is developing for the 
Air Force Systems Command's Aeronautical Systems Div. The 
display system, called the crew information manager, will 
use odicture symbols instead of numbers to present real-time 
Flight and mission information for all-weather operations in 
a variety ot military aircraft. S3oeina expects that “work® on 
the system will continue under DARPA's Dilot's Associate 


program when the current contrace explzes [kero 2 ee 


B. ACADEMIA 
Planners are but one of many types of expert systems. 


The expert system proposed in this paper is of the planner 


type. There are four basic approaches’ to planning: 
hierarchical, non-hierarchical, script-based, and 
opportunistic. 


1. Non-hierarchical Planners 
Hierarchical is interpreted as having a hierarchy of 
representations of a plan in which the highest is a 
Simplification, or abstraction, of the plan and the lowest 
is a detailed plan, sufficient to solve the problem. A non- 


hierarchical planner develops a sequence of problem-solving 
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actions to achieve each of its goals and usually has. only 
one representation of a plan. Some examples of non- 
hierarchical planners are STRIPS [Ref.10 p.523] and HACKER 
(Ref.10 p.531). HACKER generates initial plans that violate 
ordering constraints and then tries to go back and them. 
This is based on a Linearity assumption, which is’ that 
subgoals are independent and thus can be sequentially 
achieved in an arbitrary order. The Linearity assumption is 
used in cases where there is no a priori reason to order one 
Operator ahead of another [Ref.10: p. 520). This assumption 
could not be made for this implementation. The actions taken 
by the pilot must be ordered and thus the recommendations to 
the pilot by the system must be ordered. A characteristic 
of non-hierarchical planners is the inability to distinguish 
between the relative importance of recommended actions. 
Means-ends analysis is often used in non-hierarchical 
Dlanners (Ref.10: p. 517), but is also considered by many to 
be a hierarchical itself. Means-ends is appropriate when it 
is known how each problem-solving operator changes the state 
of the world and knows the preconditions for an operator to 
be executed [(Ref.10: p. 524). Operators or actions are 
selected according to their ability to reduce the observed 
difference between the current state and the goal _ state. 
(Re£.5: p.147)]. 
to select these operators, means-ends analysis must 


be provided with a table listing the best operator for 
classes of states. These tables refer to the difference 


Be 


between the current state and the goal state, and are thus 
called difference tables. 


Difference tables provide a way of decomposing a_ hard 
problem into simpler sub-problems recursively, thus making 
means-ends a recursive search. Means-ends analysis is also 
called hierarchical reasoning. (Ref.11: p. 11.1] 

2. Hierarchical Planners 

Hierarchical planners utilize a hierarchy of 
representations of a plan and are designed to solve some of 
the problems with nonhierarchical planners. Examples are 
NOAH [(Ref.10 p.541)], MOLGEN, [{Ref.10 p.551)] and ABSTRIPS 
(Ref.10 p.523)]. First a plan is sketched out. The initial 
sketch, even though complete, is usually vague. Those parts 
that are vague are refined into more detailed sub-plans 
until finally the plan has been refined to a complete 
sequence of detailed problem-solving operators. The major 
advantage to this is that it provides a means of ignoring 
the details that obscure or complicate a problem (Ref.10 p. 
517]. Because these planners are able to represent a problem 
at different levels of abstraction, they tend to be very 
elaborate but effective planning models. 

3. Script-Based Planners 

The script-based method utilizes stored plans which 
contain the outlines for solving different kinds of problems 
over a range of classes. One of the MOLGEN systems was 
implemented in this manner. First a skeleton plan is’ found 


that is applicable to the given problem. Then the abstract 


steps in the plan are filled in with problem-solving 
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operators from the particular problem context. If this can 
be done for each abstracted step, then the plan as a_ whole 
will be successful (Ref.10: p. 518]. Operators are not 
ordered until constraints are available to guide ordering. 
This eliminates premature commitment that could cause a 
conflict with other parts of the plan. Scripts are not well 
suited to diagnosis of comopcund amergencies secause Ee al 
scripts can't be anticipated and thus pre-written. 
4. Qpportunistic Plannars 

Opportunistic olfanners are ditferent from those 
discussed thus far. JIperators, or steos in the plan are 
introduced whenever the ovnportunityv arises. This contzasts 
greatly with the least commitment strategies in NOAH and 
MOLGEN. Anotner chazvacteristic of these planners is 
multidirectionality. Planning takes place on several levels 
simultaneously. 

CRYSALIS is an example of an opportunistic planner. 
It uses a blackboard type data-structure to represent’ the 
complex control structure of human planning. This’ involves 
having a number of specialist programs’ that produce 
hypothesis about data posted on the blackboard. These 
hypotheses are available to all other specialists. 

The blackboard is divided into planes. Planes are 
organized to reflect characteristic processes in planning. 
The five categories of planes are (a) the plan plane _ which 


is the actual plan or executive decisions; (b) the meta-plan 


Py 


plane contains information on the general approach, such as 
designating means-ends or some other approach; (c) the plan 
abstraction plane which contains desirable actions in 
general, and controls the plan plane; (d) the knowledge-base 
plane which contains world or external knowledge; and (e) 
the executive plane schedules the planning decisions made by 
the plackboard [Ref.10: op. 25). 

The disadvantage of this method is that it is more 
likely to rewrite parts of its plan or change its goais than 
is a hierarchical planner. This takes up valuable time wnen 


dealing with real-time constraints. 
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III. CONCEPT OF THE PLANNER 


This planner is passive taking no action on its own. Its 
recommendations to the pilot would appear on ae digital 
display on the instrument panel. This system could be a 
replacement for, or supplement to, the master caution panel. 

The planner is autonomous in detecting its own goals 
based on the current state description, rather than simply 
having the goals handed to it. The system initializes the 
goals to the empty list, and checks the gauges and caution 
lights for the initial establishment of goals. Any 
ElLuctuations, increases or decreases in component status, 
require a response. 


A means-end control structure does several things: 


( 1 ) Means-ends analysis attempts to reduce the 
difference between the current state and the _ goal 
state. 


( 2 ) Subgoals are created via problem reduction. 
( 3) Planning is incorporated by deferring actions until 
after the overall solution path is established. 
A. KERNEL 
The means-ends control structure was written, in prolog, 
by Dr. Neti, °C. Rowe (Ref.1l p.11.3]. This control 
structure, and the process of goal acquision, make up the 
The kernel of the planner. Once the goals have been acquired 


and resolved, the facts, in a knowledge-base set along with 
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means-ends-analysis, are used to satisfy these goals. As 


with most expert systems, the size of the kernel is small in 


comparison to the facts in the knowledge-base. 


B. KNOWLEDGE-BASE SETS 

The planner consists of multiple knowledge-base sets 
that enable it to efficiently satisfy goals and rae, 
appropriately respond to different requirements in different 


flight regimes. A knowledge-base set consists of: 


( 1 }) Recommended operators for achieving goals. 
( 2 ) The preconditions for the usage of operators. 
( 3) £=The effects (postconditions) on the state 


description as a result of the application of 
operators. 


The partitioning of the knowledge-base is critical to 
both efficiency and correctness. What's recommended for a 
goal in a high altitude environment could be different from 
that in a low altitude environment. As a result, different 
knowledge-base sets are required. 

The concept of multiple knowledge-base sets is very 
Similar to an air traffic controllers' handling of aircraft 
in different control sectors. Once the aircraft leaves a 
given knowledge-base set's domain, a different knowledge-base 
set is asserted. 

A response to an emergency ina helicopter is in many 


cases predicated oon the aircraft's altitude and airspeed. 
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Domains defined in terms of altitude or airspeed can be made 
active when the aircraft enters its domain. 

Although this system requires multiple knowledge-base 
sets, only one is implemented. Only the knowledge-base would 


need to be changed to adapt it to another aircraft. 
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IV. IMPLEMENTATION OF THE PLANNER 


This chapter describes what techniques were used _ to 
construct the planner and why this particular implementation 


was chosen. 


A. PROGRAMMING LANGUAG@ 

Lisp is the most widely used programming language in 
artificial intelligence today. dowever, Prolog, a relatively 
newer lanquage, is gaining in povnularity. 


Prolog has three positive features that give it kev 


advantages over Lisp. Wiese; Prolog in syntax and 
semantics is much closer to tormal Logic. The programs are 
better understood and oetter maintained. Second, Pxzotos 


provides automatic backtracking, a Feature that simplifies 
the writing of search routines. Third, Prolog allows a 
procedure definition to be used for many different kinds 
of reasoning by allowing the designated input and output 
parameters to vary from call to call. (Ref.11: preface] 
The availability of a Prolog compiler for the IBM AT was 
a very important factor in this implementation. The run time 
required to provide the recommended operators for a 
prescribed goal was of great interest. Turbo Prolog is one 


of the fastest of the implementations developed for the IBM 


AT and compatibles [(Ref.12: p. 254]. 


B. APPROACH 
First, it is necessary to discuss the data types and 


symbols used in the program. 
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The caution panel cluster is represented by symbols each 


corresponding to a single caution light or segment in the 


cluster. A list of these segments is a segment_list. These 


segments are shown in Figure 4.1. 


segment = 
engl_oil_press eng2_oil_ press 
engl_chip detr eng2_chip detr 
engl_fuel_filter eng2_fuel_filter 
de_gen_l dc_gen_2 
xmsn_chip_detr c_box_chip detr 
temp _press_90 temp_press_42 
Chip _detr_90 Chip _detr_42 
xmsn_oil hot xmsn_oil_press 
c_box_oil_press c_ box_oil_hot 
hyd_press_1l hyd_press_2 
hyd_tamp_1 hyd_temp_2 
ac_main ac_stby 
engl _gov_man eng2_gov_man 
fire 1 pull fire 2 pull 
rpm_rotor_low rpm_rotor_high 
rpm_ngl rpm_ng2 
xmsn_oil byp 
Figure 4.1 Segment Symbols Representing Caution Panel 
A partial state description of the aircraft and its 
environment at any given time is defined in terms of 
state_elements. A list of state elements is a state_list. 
State elements are shown in Figure 4.2 
1. Goal Acquisition 
The problem solver has access to the _ instruments 
and caution lights and evaluates them in terms of their 
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status, i.e. high, low, erratic etc. Any changes in status 
are flagged as requiring a response. The aircraft's 
instruments are referred to aS components. However, a 
component is defined as being any of the symbols listed in 


Figure 4.3. 


state_element = 


full (component) landing_zone(zone_quality) 
metal particles(component) automatic(component ) 
manual (component ) idle(component) 
normal (component) decrease(component) 
failed(component) hot (component ) 
on(component) engaged (component) 
off(component) fire(component) 
gross_weight(wt_class) airspeed(knots) 
altitude(ft) oat (component_status) 
land(type_landing) oil_bypassing_cooler 
left_yaw fuel_obstruction(component) 


Dpower(component_status) fuel_press(component_status) 
ammeter (component,component_status) 

revs( component, component_status) 

oil_press( component, component_status) 

oil_temp( component, component_status ) 

torgque( component, component_status ) 
prepare_for_failure(component) 

{tt (component, component_status) 
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Figure 4.2 State Elements 


The goals are generated by scanning each caution 
light segment in the master caution panel and each 
instrument, as seen by the pilot. For each caution light 
there is a set of goals. Prior to assertion, the goals are 


Checked against all the other goals asserted previously. 
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Duplicates, and goals which are subordinate to previous 
goals (in its class), are not retained. Classes of goals are 
defined by priority sets which list explicitly the relative 
priority of each goal ina given class. If a goal of a 
higher priority has been asserted, no lower priority goals 
will be asserted. Figure 4.4 shows an example of the 
relative oriority between power status values. In most cases 
a specific goal belongs to only one class or (set). The 


majority of the priority sets contain only one goal. 


component = 
angl angZ xmsn 
€¢ box eng oil _oress genl 
gen2 govl gov2 
master_caution master_arm ecu 
scas fuel fuell 
fuel2 fuel_press throttlel 
throttle2 oil_temp_90 oil press_90 
oil _temp_42 oil _press_42 gear_box_90 
gear_box_42 c_box_oil_temp c_box_oil_press 
xmsn_oil_temp xmsn_oil_press hyd_sys_l 
hyd_sys_2 hyd_press hyd_temp_1 
hyd_temp_2 rotor ngl 
ng2 fet J HEC 2 
nfl nf£2 rain_rmv 
power main_inverter standby_inverter 


Figure 4.3 Aircraft Component Symbols 


A component is described in terms of its 


component_status. One or more of eight possible status 
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values may apply to a given component. The goals generated 
by the planner must be free of conflicts. A _ possible 
conflict exists, for a given component, when two or more 
status values are true at the same time. These status values 
are prioritized by facts inthe knowledge base via a 
prioritized status_list, which is a list of component status 


Symbols. Component status values are shown in Figure 4.4. 


a [eee cee oe ae ae eee eee cee cme ee cee cme ae ce cee eee oe cee oe eee eee eee cee eee eee cme cme cme cee OP cme cme come come cme cme cee cee cee ee ee eee eee cee cee ce cme eee cee cee ae cee am ae ae ee ee oo 


component_status = 


none aigh low 
increase decrease ok 
erratic r2soond 
Drioritv_set([({power(none), power(low), 
power (decrease), DdDower(inczrease)])). 


—_— op ee cee eee cee ee eee cee ce ce ee ce cee ce ce Ge ee ee ee ee ee ee ee ee ee ee ee ee ee eee ee ee ee ee ee ee ee ee ee ee ee ee ee es ee ee ee es ee es ee ee ee eee ee 


Figure 4.4 Component Status Values 


At the highest level of abstraction, the goals passed 
to means-ends are merely to respond to a given gauge. The 
state_list is then searched for the specific status of the 
component. The respond status is slightly different from the 
other quantifying and mutually exclusive status labels such 
as low, high etc. For a given component, the status respond 
can co-exist with a high or low component status in the 


current state description. 
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2. Organizing the Search 

The order in which goals are selected from a goal 
list to be satisfied is driven by the order of the 
recommended facts. The most important goals are placed 
first. If there is more than one recommended operator that 
applies to a given goal then those operators are ordered 
according to the urgency of the operator. An example of such 
recommended facts are shown in Figure 4.5. 

Recommended facts with multiple goals should have the 
goal that is least likely to be satisfied first in its goal 
list. Search time can be reduced by explicitly including 
predicted response groups into the recommended structure. An 


example of this is the confirm_dual_eng_failure operator. 


recommended( State, [revs(ngl,respond), 
revs(ng2,respond), off(genl), 
off(gen2), off(engl), off(eng2), 
land(pract)], confirm_dual_eng_failure). 


recommended( State, [torque(engl, respond)], 
confirm_nfl_failure). 


recommended( State, [torque(engl, respond) ] 
check_ngl_overspeed). 


recommended( State, [torque(engl, respond) ] 
check_ngl_underspeed). 


Figure 4.5 Recommended Facts 
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Grouping multiple goals in one recommendation 


reduces the number of times a given operator is invoked 


unnecessarily. However, this should not be wz substitute for 


the single goal recommended facts. Single goal recommended 


facts are the finest granularity of the search process. 


The output of this planner is -to present’ the 


operators to the pilot as recommendations to satisfy an 


immediate goal. A list of these operators are referred to as 


an op_list. Operators are shown in Figure 4.6. 


operator = 


normal_approach 
slope_landing 
steep_approach 
high_speed_approach 
max_weight_landing 
sliding_landing 
pract_landing 
pract_landing_outrankedl 
pract_landing_outranked2 
pos_landingl 
pos_landing2 
pos_landing_outranked 
autorotation 
check_ngl_overspeed 
check_ngl_underspeed 
check_ng2_overspeed 
check_ng2_underspeed 
genl_off 

gen2_off 


Figure 4.6 


master_arm_off 
confirm_dual_eng_failure 
confirm_engl_failure 
confirm_eng2_failure 
engage_scas 

ecu_off 

rain_rmv_off 
govl_to_manual 
gov2_to_manual 
govl_to_automatic 
gov2_to_automatic 
confirm_nfl_failure 
confirm_nf2_failure 
throttlel_idle 
throttle2_idle 
check_genl_failure 
check_gen2_failure 
engl_off 

eng2_off 


Recommended Operators 


There are nine different landing profiles and 
emergencies. A landing as a result of a malfunction could be 
described as land as soon as practical, soon as possible, or 
a landing via autorotation. With the exception of an 
autorotation, landings are a function of aircraft wt_class 
or landing Zone_quality. Landing profiles and classes area 


snown in Figure 4.7. 


we class = 
Reavy ; moderate 


zone_quaiity 


Claar ; confined ; slope 
cype_lianding = 

Dract; pOoS; auto; 
normal; nign_speed; slope; 
Sliding; max_weight; steep 


priority _set({land(pos), land(pract)]). 


Figure 4.7 Landing Profiles 


3. Natops to Code Translation 





The NATOPS manual together with the experience of 
the author played the role of the expert for this system. It 
Was necessary to translate the procedures’) and system 
information contained in the NATOPS manual into a knowledge- 


base. Examples of this translation are now discussed. In 
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each example the indications and corrective action are taken 


from the NATOPS manual. 


The first example, shown in Figure 4.8 describes the 


initial action required by the pilot in the case of a chip 


Caution and warning lignt - INITIAL ACTION 
Panel wording: CHIP DETR 


Condition: metal particles in engine 


Corrective Action: Flignt idle. Check oil pressure and 
temperature. if normal operate at reduce power. 
fr pressure is low and/or temperature is high, 
shut down respective engine. Land as soon as 


practical. 
This intormation is coded as follows... 


caution_light( State, engl_chip detr ):- 
member(metal_particles(engl), State ), 
write( " Caution light: engl_chip_detr " ),nl, 
secondary(State, engl_chip_detr). 


secondary(State, engl_chip _detr) :- 
member(oil_press(engl, X ), State ), 
below_limit(L), status_member(X,L), 
create_goals([ off(engl),land(pract)] ). 


secondary(State, engl_chip _detr) :- 
member(oil_temp(engl, high), State ), 
create_goals([ off(engl),land(pract)] ). 


secondary(State, engl_chip_detr) :- 
create_goals([{ idle(throttlel),land(pract)] ). 


Figure 4.8 Translation Example I 
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detector caution light. By assumption, caution lights and 
instruments do not need to be cross checked. In this example 
there is more than one course of action. Depending on the 
status of the oil pressure and temperature, (secondary 
indications), different goals are asserted. The goals that 
are created are-.thus a function of the primary(caution 
light) and secondary indications. The predicate create_goais 
conditionally asserts the goals that are its arguments based 
on goal priority and duplication. 

Figure 4.9 shows the translation of a definition of 
a power turbine governor failure into code. I£ the immediate 
goal is to respond to the torque of the #1 engine then it 
would be recommended to check the #1 n£ governor. If a 
precondition to some operator is that the #1 governor be in 
a failed state, and this has yet to be proven, then the 
second recommended fact would be used. 

The indications of a #1 nf governor failure are 
represented by the preconditions listed in Figure 4.9. If 
the preconditions are true then nothing will be deleted from 
the current state description because nothing has changed. 
Only a diagnosis of the situation has been accomplished. 
Nothing has been done about it at this point. The current 
state description is amended to reflect the fact that’ the 
governor has failed and the instruments listed in the 


addpostcondition fact have been responded to. 
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Power Turbine Governor (NF) Failure 
Indications. 


Erratic GAS PROD RPM (Ng). 

Erratic INLET TEMP. 

Fluctuating ENG RPM (Nf). 

abrupt increase in ENG RPM (N£) above 
governed value. 


6 


6 


mm GN) 


5. Abrupt decrease in ENG RPM (N£) below 
governed value. 

6. Fluctuating TORQUE. 

Procedure. 

1. A£Eected engine - IDENTIFY 

2. Throttle - ENGINE IDLE. 

3. GOV - MANUAL 

4. Throttle - ADVANCE. 

5. LAND AS SOON AS PRACTICAL. 


This information is coded as follows... 


recommended( State, [torque(engl,respond) ], 
confirm_nfl_failure). 


recommended( State, [failed(govl) 1], 
confirm_nfl_failure). 


precondition( State, confirm_nfl_failure, 
(revs(ngl,erratic), itt(engl,erratic), 


revs(nfl,erratic), torque(engl,erratic), 
automatic(govl)])) 


deletepostcondition( State, 
confirm_nfl_failure,I[]). 


addpostcondition( confirm_nfl_failure, 


[revs(ngl,respond), revs(nfl,respond), 
failed(govl),torque(engl,respond)])). 


Figure 4.9 Translation Example II 
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The third example, a single engine failure, is shown 
in Figure 4.10. When an engine failure occurs the rotor 
speed decreases somewhat due to loss of power. This creates 
the goal revs(rotor, respond). One of the recommended 
operators for this goal is confirm_engi_failure. If all of 
the preconditions have been meet, the current state 
Gescription will be altered by the addition and deletion of 


tacts as snown. 
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Single Engine Failure (In Flight). 


When one engine fails, rotor speed can be expected 
to droop. The desired rotor rpm can be regained if 
sufficient oower is available, by using the engine 
RPM switch. After rpm is regained by use of the RPM 
switch, desired rotor rom can be maintained by the 
collective control. 


INDICATIONS. 
1. Left yaw 
2. RPM caution light (gas oroducer) 
SeeMASTERECAUTEON Lighe 
4. Rotor rom decrease 
5. angine instruments decrease 
{ engine _instruments } 
CAUTION panel Lights 


Or 


THis intormation is coded as tollows... 


recommended( State, 
{revs(rotor,respond)], confirm_engl_failure). 


precondition( State, confirm_engl_failure, 
[torque(engl,none), torque(xmsn,low), 
revs(ngl,none), revs(nfl,none), 
oil _press(engli,none), failed(genl), 
itt(engl,none), left_yaw, on(fuell), 
full(throttlel), revs(rotor,low))). 


Geletepostcondition( State, confirm_engl_failure, 
{on(ecu)] ). 


addpostcondition( confirm_engl_failure, 
{ off(ecu),failed(engl),revs(ngl,respond), 
revs(nfl,respond),revs(rotor,respond), 


itt(engl,respond),torque(engl,respond), 
torque(xmsn,respond)]). 


Figure 4.10 Translation Example III 


34 


V. ANALYSIS AND CONCLUSIONS 


A. ANALYSIS 

A version of the planner was tested to determine the 
execution time of the various test cases. Only the 
intermediate write statements, included in the source code 
in appendix D, were left out. These times are interesting 
because they give some relative measurement to the costs of 
the various aspects of the planner. The response times for 
each test are shown in Figure 5.i. 

Detailed output listings of tests 2, 3, and 4, can be 


found in appendices A, B, and C respectfully. 


= aa ee we eee ee ee ee eee eee eee ees ee ee ee ee eee eee eee eee eee eee eee eee eee eee cee ees eee eee eee eee eee eee eee eee eee es eee eee ee eee ee ee eee eee ee ee ee 


TEST # TIME EMERGENCY 
1 0.39 sec. none 
2 1.82 sec. dual engine failure 
c. 1.92 sec. engine #1 failure 
4 2.53 sec. engine #1 failure and 


#2 Nf governor failure 


—_— awe aw aw aw ow ap ewe a a aw awe ee ae ee eee ee eee ss See ee eee es eee eee eee ee ee eee eee eee eee eee ee ee eee ee eee ee eee es ee oe 


Figure 5.1 Test Case Response Times 


1. Test l 


This test involved no goals. It did provide’ the 


amount of time necessary to scan the current state 
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description. The base time of 0.39 sec. as reflected by test 
#1 is also significant because this determines the sampling 
rate of the planner. The state description then could be 
sampled approx. 150 times per minute. The longest reaction 
time is experienced when a component failure occurs 
immediately after a sampling of the current state 
description. This means as much as 0.8 sec. could elapse 
before a response condition would be acted upon by the 
planner. 
2. Test 2 

In test #2 only four operators are considered and 
all four were applicable. Figure 5.2 shows, through 
indentation, the nesting ievels for each operator invoked. 
Backtracking occurs when the indentation is reversed, 
and no backtracking occurs in this example. This is’ the 
optimum situation. Here the planner is telling the pilot 
that it has confirmed a dual engine failure and an 
autorotation is to be accomplished. 

3. Test 3 

In this case, 11 operators were tried with 5 being 
applicable. Figure 5.2 depicts the backtracking that occurs 
as a result of some recommended operators failing to satisfy 
immediate goals. It should be pointed out that two of the 
operators, confirm_eng2_failure and check_gen2_failure, were 


attempted twice. The pilot in this case is informed that the 
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TEST #1 
-no recommended operators- 
TEST #2 


conftirm_dual_ eng_failure 
pract_landing_outzranked1l 
oos_landing_outzranked 
autorotation 


TSST #3 


Gone vem eng2zgcrai lure 
eneoce cgenz "Eaiiure 
Gonrizm engi tailure 
angi ort 
Geni ors 
oract_landing_osutzankedi 
pos_landing_outzranked 
Q@UGOrotaction 
confirm_eng2 failure 
check_gen2_failure 
pos_landing 


TEST #4 


confirm_eng2_failure 
check_gen2_failure 
confirm_engl_failure 
confirm_nf2_ failure 
engl_off 
genl_off 
pract_landing_outrankedl 
pos_landing_outranked 
autorotation 
confirm_eng2_failure 
check_gen2_failure 
pos_landing 


Figure 5.2 Recommended Operator Selection 


Shi 


#1 engine has failed, to secure the #1 engine and generator 
and to land as soon as possible. 
4. Test 4 

Here 12 operators were selected with 6 being 
applicable. Again, two of the operators, 
confirm_eng2_failiure and cneck_gen2_failure, were attempted 
twice. In addition to the information presented to the pilor 
in test 3, the pilot is informed that the #2 nf-governor nas 
failed. 

Governor <ftaiiures are not as straightforward to 
diagnose as engine failures. As a resuit this intormation is 
potentialiy more valuable. 


= 
4 


Programming Lanquage 





Turbo Prolog is not considered to be a Clocksin and 
Mellish PROLOG as most others are (Ref.13 p.334]. The first 
major difference between Turbo Prolog and other 
implementations is the required use of Pascal-like type 
Gefinitions for parameters. This has the advantage of 
catching various errors at compile time, and also allows the 
compiler to generate more efficient code. The drawback is 
that describing generalized procedures can sometimes result 
in multiple definitions of a rule to handle different types 
of variables. An example of this was the member predicate. 
As defined, it could accept as arguments a state_element and 
a Sstate_list. However, when this predicate was needed to be 


used with arguments of type component_status and status_list 
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respectfully, a separate definition of the member predicate 
had to be defined named "status_member". The Pascal-like 
syntax was more of a help than a hindrance and greatly 


helped in the debugging process. 


B. CONCLUSIONS 

Turbo Prolog proved to be suitable for this purpose and 
the timing results were encouraging. Useful information was 
rapidly presented in the form of diagnosis and recommended 
actions. 

Means-ends proved to be erfective because the structure 
of the task was well suited to the data structure of the 
recommended racts. The amount of information processing 
required to satisfy the various intermediate goals is 
reflected by the number of recommended operators considered 
in satisfying the immediate goals. All of the facts in the 
knowledge-base were not utilized by the examples’ exercised 
in this implementation. 

Translation from the NATOPS manual into a knowledge-base 
Was straightforward and easily verified. In employing 
multiple knowledge-base sets, correctness and speed of 
execution can be maintained. 

It is conceivable that this system could be used in 
place of the existing master caution panel which displays 
caution light information only. Perhaps a digital display 


that presents graphically, as well as textually, the 
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Operators and actions to be taken. In this way no extra 
space would need _ to be provided for this system in the 
cockpit. This makes this feasible for use in existing 
aircraft. 

For total aircraft system implementation, the number of 
operators required is dependent on the granularity of 
information provided to the pilot. Higher levels of 
abstraction are required for immediate actions, with more 
detailed instructions provided at the request of the pilot. 
Different help levels could be provided by switching to a 
specialized knowledge-base. This implies an interactive 
capability by the pilot to select goals, and a means to do 
so would need to be provided. 

The inflight emergency domain requires aS a minimum the 
following domains: Takeoff, Low altitude, High altitude, 
Night, and perhaps instrument conditions. 

This system potentially lends itself to practically any 
application within the aircraft. The task of piloting an 
aircraft is very well defined and procedurized and could 
possibly be expanded into the realm of normal procedures as 


well as emergency procedures. 


C. RECOMMENDATIONS 
It is recommended that a full implementation be built to 
determine the number of knowledge-base sets needed and the 


scope of each. 
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APPENDIX A 


DUAL ENGINE FAILURE EXECUTION 


Caution light: engl_oil_ press 
Caution light: eng2_oil_ press 
Caution light: dc_gen_l 
Caution light: dc_gen_2 
Caution tight: rpm_rotor_low 
Caution light: rom_ndai 
Caution light: rpm_nag2 


Goal list is: (revs(ng2,respond), revs(ngl,respond), 
revs(zotor,resoond), ori(genz2), ObEtGeni ); oft(eng2), 
land(pract), orft(engl) ]j 


ditterence: {revs(nd 
revs(rotor,resoond), re) 
mama i pract), off(engl) ] 


err ft 


nd), revs(nal,resovond), 
Vy Sf. Genigy ort{endZ), 


Ante Sa ae aK ee XX SK SX HR SX OX KK HRS XX ESR 


current operator: coniirm _duai_eng_ failure depth 1s: i 


KEKKKKKKKKK KE KEKE KEE EKER EEE ER ERE REREREKREEER 
Operator preconditions have been met 

items being deleted are: [fon(ecu) } 

items being added are: [of£(ecu), fFailed(engl), 
failed(eng2), off(genl), off(gen2), off(engl), off(eng2), 
revs(ngl,respond), revs(nfl,respond), revs(rotor,respond), 
itt(engl,respond), itt(eng2,respond), revs(ng2,respond), 
revs(n£2,respond) ] 

Goal list is; [revs(ng2,respond), revs(ngl,respond), 
revs(rotor,respond), of£(gen2), off(genl), off(eng2), 
land(pract), off(engl1) ] 


difference: ({land(pract) ] 


KEKKKEKKKEKKKEKKEKEKKEREKKEKEEREKEEREKKEKRKKEREKEERKEKEEKKEE 


current operator: pract_landing_outrankedl depth is: 2 


KKEEKKKKEREKEKKEKEKEKEKREREREREEKRREKEKREKREKREKEKREEKE 
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Goal list is: [fland(pos) ] 
difference: [land(pos) ] 


KHRKRKEKKKKKKEKKEKKEKKEKRKEKEKKEKEKEKEKKEKRKEKEREKREKEKEREKREKER 


current operator: pos_landing_outranked depth is: 3 
KRRKEKKKKKRKEKKKKKRKKEKKKRRKKRKEKRKEEKKKEKKKRERRKKRKRERRERE 

Goal list is: iamaieeeoys 

a@ifference: {land(auto) } 


KRRKEKRKRKKKREKRKKREKKRHRKRKEKHEKRKRKEREKKKEKRKEKRKEKEKREKEKEREREKEE 


Current operator: autorotation deoth is: # 
RHKEEKAKAKBRKARARAKARARRACAHX TAKARA KA KX ORAS AT AAAS 
operator poreconditions have been met 


items being deieted are: [full (throttilel) ,;e£ull( throteme2 | 
airsoeed(100), altitude(1000), revs({(zrotor,resvond) } 


items being added are: [fidle(throttlel), idle(throttle2), 
airspeed(0), altitude(0), revs(rotor,respond),land(auto) ] 


operator preconditions have been met 
items being deleted are: [(] 
items being added are: [land(pos) ] 
operator preconditions have been met 
items being deleted are: [] 
items being added are: [{land(pract) ] 
operator preconditions have been met 
The recommended operators are: {[confirm_dual_eng_failure, 


autorotation, pos_landing_outranked, 
pract_landing_outranked1] 


The final state description is: {oil_press(engl,none), 
oil_press(eng2,none), revs(rotor,low), off(rain_rmv), 
off(master_arm), landing_zone(clear), full(throttlel), 
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full(throttie2), off(master_caution), automatic(govl), 
automatic(gov2), onffuell), on(fuel2), normal(fuel_press), 


torque(engi,none), torque(eng2,none), torque(xmsn,low), 
revs(ngl,none), revs(ng2,none), revs(nf1,none), 
revs(nf2,none), oil_temp(engi,ok), oil_temp(eng2,0k), 


failed(genil), failed(gen2), full(fuel), off(scas), on(ecu), 
0oil_temp(c_box,ok), oil_press(c_box,ok), oil _temp(xmsn,ok), 
oil_press(xmsn,ok), ammeter(genl,none), ammeter (gen2,none), 
fuel press(ok), itt(engl,none), itt(eng2,none), 
oil _ press(hyd_sys_1,ok), oil press(hyd_sys_2,0k), 
airspeed(100), altitude(1000), left_yaw] 
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APPENDIX B 


SINGLE ENGINE FAILURE EXECUTION 


Caution light: engl_oil_press 
Caution light: dc_gen_l 
Caution light: rpm_rotor_low 
Caution light: rpm_ngl 


Goal list is: [revs(ngl,respond), revs(rotor,respond), 
off(genl), land(pract), off(engl) ] 


difference: [revs(ngl,respond), revs(rotor,respond), 
off(geni), land(pract), off(eng1) } 


KRKEKKKEKKRKEKKEREREKEEKEKEKRKKRKERKKREKEKKKEKRKKKRREKERKEEKE 


current operator: confirm_eng2_ failure depth is: 1 


RRAKRKRKKRRKKRKKKEKKKKREKKKRKKKKE KKK KKKKKKS 


Goal list ee (Corque(eng2,none), torque(xmsn,low), 
revs(ng2,none), revs(nf2,none), oil _press(eng2,none), 
failed(gen2), itt(eng2,none), left_yaw, on(fuel2), 
full(throttle2), revs(rotor,1low) } 

difference: (torque(eng2,none), revs(ng2,none), 
revs(nf2,none), oil _press(eng2,none), failed(gen2), 


itt(eng2,none) } 


KREEKEKKKKEKKEKKREKKEKRKEKKEKKEKEKEKEKKEKRKKKKKKEKKKKKKEKKEKEKK 


current operator: check_gen2_failure depth is: 2 


KRREEEKKKKKKKEKEKKKKEKKEKEKKKEKEKKEKKKEKKEKKKKKKRKKRKKKKKKKEK 


Goal list is: fon(gen2),ammeter(eng2,none) ] 


difference: [on(gen2),ammeter(eng2,none) } 


KRHEKEKKEKKKKKEKEKKKKKEKKKKEKRKKKKEKEKKRKEKKEKRKEKKEKKEKKKKKEKKE KK 


current operator: confirm_engl_ failure depth is: 1 


22S SSS ESESE SSS SSS SESS SE SEES ESE SESE ESE ESE SS. | 


operator preconditions have been met 
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items being deleted are: (on(ecu) ] 


{tems being added are; foff(ecu), failed(engl), 
revs(ngl,respond), revs(nfl,respond), revs(rotor,respond), 
itt(engl,respond), torque(engi,respond), 


torque (xmsn,respond) } 


Goal list is: {revs(ngl,respond), revs(rotor,respond), 
off£(genl), land(pract), of£(eng1)) 


ditference: [(fort{geni},land(pract),otifengl) } 


RARAARAARAKARARERKAAAARVAREAKHKKKLARRARAKHAKHRAKWURRRRAKK 


current operator: engi_oti deoth is: 2 

SRB VE AR WR WAKA VK KEK OKRA KEAARAAK REA RRR 
operator oreconditions nave Deen met 

items Deing deieted are: foni(endi) |} 

items being added are: {ozrffenal)} 


Goai list is: {zevs(nal,respond), revys(rotor,zresvond), 
orr(geni), land(pract), ort{engi) j 


difference: foff£(genl),land(pract) ) 


KREAEKARKKRARKRRKRRARRAERRARRKARRREKARKRRREKKEREKKARKREKER 


current operator: genl_off depth is: 3 
KEKARKARARAEKRARKAREKRARARARKEKAREREKREKRRRERERARRAERARRARKRKKEE 
operator preconditions have been met 

items being deleted are: {fon(genl) ] 

items being added are: {(off(genl) } 


Goal list is: {revs(ngl,respond), revs(rotor,respond), 
of£(genl), land(pract), off(eng1l) ) 


difference: [land(pract) } 


KRKRAAARAKRREKARKKRARKKEKRKARKREKRRERRARRRARRARRARREKRKARRKKKRER 


current operator: pract_landing_outrankedl depth is: 4 
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KRREEKKEKKKKKEKKKEKKKRKEKRKEEKKEEKREKRRKERERKRKERRKEKKERERREKE 


Goal list is: (fland(pos) ] 
difference: [(land(pos) } 


KKEKKKKEKRKKEKEKKKKRKEKEREKKEKRREKKEREKRKEKKEKRKEKKEREREKREREKE 


current operator: pos_landing_outranked depth is: 5 
KKKEKKEKKRRKEKRKEERRREKRKEEKKERRKEKRKKARKKRKEEKKEKRREREE 
Goal list is: [(land(auto) } 


difference: [land(auto) ] 
KRKRKRKKKKKKRKKRKKKRRARKRKKKKAMRRKARKRKKRHRREKRKARKREEKER 


cr 


Current operator: autorotation depth isz 6 


BRINE RRA A RRMA AKER K KAKO SR A ee XK Ae 


Goal list is: [failed(engqi), failed(enaqg2) j 


rh 
ah 


dizterence: [{failed(enq2) } 


bt 


KRERRARAKREKABRKRKKKEAKKKAKKKRKKRKKKEKKKARRKRKARARATEXS 


current operator: confirm_eng2_failure depth is: 7 


KRREEREKRKRREKREKREKRERRKRRERRRKRKRKRRRRRERRRRKRKKRRERRKEEEE 


Goal list is: (torque(eng2,none), torque(xmsn,low), 
revs(ng2,none), revs(nf2,none), O01l_press(eng2,none), 
failed(gen2), itt(eng2,none), left_yaw, on(fuel2), 
full(throttle2), revs(rotor, low) ] 

difference: (torque(eng2,none), revs(ng2,none), 
revs(nf£2,none), Oil _press(eng2,none), failed(gen2), 


itt(eng2,none) ] 


KRHEEKKEKEKRKEEKKEKRKEEKRKERKREKREKKKERERRRKEKKEKRKEKKRRKKEKERRRREERE 


current operator: check_gen2_failure depth is: 8 


KRREEKERKEKKEKEKRERKERRKERKEKERRKKRKRKREKRERKKEKKEKKREKEREKREKE 


Goal list is: [fon(gen2),ammeter(eng2,none) ] 


difference: (on(gen2),ammcter(eng2,none) ] 
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KREKKKKKKKEKKEKKKEKEEARKEKKKRKEKRKKKKEKKKEREKREKKKKEKKE 


current operator: pos_landingl Gepth is: 5 


KERR KRKREKERKEEKEEEEEKRERERES 


operator preconditions have been met 

items being deleted are: faltitude(1000),airspeed(100) } 
items being added are: [{land(pos),altitude(0},airspeed(0)] 
operator preconditions have been met 

items being deleted are: [] 

items being added are: (land(pract) ] 


operator preconditions have been met 


The recommended operators are: {confizrm_engl_faiiure, 
engi off, geni_otf, pos_iandingl, pract_landing_outrankedi) 


The finai state description is: {oil press(engi,none), 
0il_press(eng2,o0k), revs(rotor,low), off(rain_rmv), 
of£(master_arm), landing_zone(clear), full(throttlel), 
full(throttle2), of£(master_caution), automatic(govl), 
automatic(gov2), on(fuell), on(fuel2), normal(fuel_press), 
torque(engl,none), torque(eng2, ok), torque (xmsn, low), 
revs(ngl,none), revs(ng2,ok), revs(nfl,none), revs(nf2,0k), 
oil temp(engl, ok), oil temp(eng2,ok), failed(genl), 
full(fuel), o££(scas), on(ecu), oil _temp(c_box,ok), 
0i1l press(c_box,ok), oil _temp(xmsn,ok), oil press(xmsn,ok), 
ammeter(genl,none), ammeter (gen2,ok), fuel press(ok), 
itt(engl,none), itt(eng2, 0k), 0il press(hyd_sys_1,0k), 
oil_press(hyd_sys_2,0k), airspeed(100), altitude(1000), 
left_yaw] 
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APPENDIX C 


SINGLE ENGINE FAILURE / NF GOVERNOR FAILURE EXECUTION 


revs(ng2, erratic) 
reva(nf2, erratic) 
torque(eng2, erratic) 
torque(xmsn, erratic) 


Caution light: engl_oil press 
Caution light: dc_gen_1l 
Caution light: rpm_rotor_low 
Caution light: rpm_ngl 


Goal list is: {revs(ngl,respond), revs(rotor,respond), 
off(genl), land(pract), off(engl), torque(xmsn,respond), 
torque(engz,respond), revs(nf2,respond), revs(ng2,respond) } 


difference: {revs({ngli,respond), revs(rotor,respond), 
off(genl), land(pract), off(engl), torque(xmsn,respond), 
torque(eng2,respond), revs(nf2,respond), revs(ng2,respond) } 


HREAKKKKKKKEKKEKKKKKKKKKKEKREKEKKKKEKEKKKKKREKEKREKRKKKE 


current operator: confirm_eng2_failure depth is: 1 


KRAHKEKKKKKKKKKEKRKKKKKKKKRKEKKEKKKEKKKKKARKKKKKKKEKRKKEKE 


Goal list is: {torque(eng2,none), torque(xmsn, low), 
revs(ng2,none), revs(nf£2,none), oil_press(eng2,none), 
failed(gen2), itt(eng2,none), left yaw, on(fuel2), 
full(throttle2), revs(rotor,low) } 

difference: ({torque(eng2,none), revs(ng2,none), 
revs(nf2,none), oil_press(eng2,none), failed(gen2), 


itt(eng2,none) } 


KKEKKKKKKKKEKKKEKKKKKKKKKKKKEKKKKKKKKEEKKKKKEKKKEE 


current operator: check _gen2_failure depth is: 2 


KHKAKKKKKEKKKKKKKKKKKKEKEKKKERKKKKKRKEKKEKKKKKKKKKKEKE 


Goal list is: fon(gen2),ammeter(eng2,none) } 
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difference: [on(gen2),ammeter(eng2,none) } 


KKK HK RK IKK KI IK KI KICK IK IK IK IK IK IKI KKK RIKKI KK KK KK 


current operator: confirm_engl_failure depth is: l 


KRREKKKKKKKKEKKEKEKRKKKKEKKEREKKKERKKKKKEKRRKRKKKKRRRKEEK 


operator preconditions have been met 


items Deing deleted are: ion(ecu) ) 

items being added are: foftft{ecu), fFailed(engl), 
revs(ngl,respond), revs(nfl,respond), xrevs(rotor,respond), 
itt(engl,respond), torque(engl,respond), 


torque (xmsn,resovond) } 


Goal list is: (revs(nql,zespond), revs(rotor,zresvoond), 
otrt(geni), Land(pract), oft{engl), toxrgue(xmsn,xresvoond), 
torque(eangz,zesoond), revs(nt2,rzespond), revsingZ,respond) j 
difference: Voms {genio land(pract), oftf(engl), 
torgque(enGcz,zrespond), revs(nizZ,respond), revs(naqZ,zespond) ! 
ec cor © «a a x Re eee eK SK TET CER EKKeKA ES 
current operator: confirm_nf2_failure depth is: 2 
REKEKEKKKKEKRKKREKREREREKREKRRKRKREKRRKKRKREKREREKRERE 

operator preconditions have been met 

items being deleted are: [] 

items being added are; {revs(ng2,respond), 
revs(n£2,respond), failed(gov2), torque(eng2,respond) } 

Goal list is: [revs(ngl,respond), revs(rotor,respond), 


off(genl), land(pract), off(engl), torque(xmsn,respond), 
torque(eng2,respond), revs(nf£2,respond), revs(ng2,respond) ] 


difference: f{off£(genl),land(pract),of£(engl) } 


KKKEKKKKEKEKKEKKKEKEKEKRKREKRRRKERKRKRKREKEKERKRKKKKKEEK 


current operator: engl_off depth is: 3 


KHRKKKKEKKKKRKKEKKEKKKRREKRKEEKRKRRKERREKEKKKKEKEKEKRKEKE 


operator preconditions have been met 
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items being deleted are: fon(engl) } 


items being added are: [off(engl) ) 

Goal list is: {revs(ngl,respond), revs(rotor,respond), 
off(genl), land(pract), off(engl), torque(xmsn,respond), 
torque(eng2,respond), revs(nf2,respond), revs(ng2,respond) } 
difference: [{off(genl),land(pract) } 


‘eee See Eee ESE SSE PEP See ee See ee SSS ES SE SS SS OS Sooo ES & SS | 


current operator: geni_orf depth is: 4 
RKKKEKEEKKEEREERAKERREEEKKERRRKEKRAARKKEEKARAKREEEEKIEX 

operator oreconditions nave bceen met 

items deing deleted are: {foniqaenil) j 

items DdDeing added are: {ori(qgeni) } 
GOai iist is: (revs(nqi,resnond), revs(rotor,zesnond}), 
ori{geni), land(pract), ecfritengi), torque(xmsn,rcesdond), 
corque(engZ,resoond), revs(nt2,respnond), zevs(naqZzZ,zespond) } 
difference: [(land(pract) ] 


KKAEKKREKKKKKKKKKKREKKKKKARRKKEKKKRKKKKKRKKEKEKELR 


current operator: pract_landing_outrankedl depth is: 5 
KRHKKKKKKKRKKKKKKKEKREKREKEKKKKKEKKKKKKKKKKKRKEKKKKKKKE 

Goal list is: [land({pos) ] 

difference: [land(pos) } 


KKEKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKEKRKEKKKKKKKKKEKE 


current operator: pos_landing_outranked depth is: 6 


KKRKKKKKKKKKKKKKRKKKKKKKKKKKKKKKKKKKKKKKEKKKKKKEK 


Goal list is: {land(auto) ) 


qaifference: [fland(auto) ] 


KKEKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKEKKKKERKKKKEE 
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current operator: autorotation depth is: 7 
KRKEARKKEKEKKEARRAKEKKEKEKKEKKEKRRAEKRKERARREKREKKEKKRKRKEKE 
Goal list is: (failed(engl), failed(eng2)] 
difference: [{failed(eng2) ] 


roe PeeSESSESESESSSE SSS SSES SSS SSS ESSE SSS SES SES SESS & : 


current operator: confirm_eng2_failure depth is: 8 


KRARKKAREKRKEKEKKERAKRKRKEKEKKAKKKEEKKRKKRKEKEKKREKRKKREREE 


Goal list is; {torque(eng2,none), torque (xmsn, low), 
revs(ng2,none), revs(nf£2,none), oil _press(eng2,none), 
failed(gen2), itt(eng2,none), left_yaw, on(fuel2), 
full(throttle2), revs(rotor, low) ) 

difference: {torque(eng2,none), revs(ng2,none), 
revs(nr2,none), oil_press(eng2,none), failed(gen2), 


itt(eng2,none) | 

SK REAKKKRKAEKRARAKRKRLKKKRRARAKARAKRKRARRAKRARRAKRKKRKERKKRE 
current operator: check _gen2_failure depth is: 9 
HAKKKKKKKKEKKKRKKEKKEKEEKKEKKEKERRERREREKREKKEKEREE 
Goal list is: fon(gen2),ammeter(eng2,none) ] 
difference: fon(gen2),ammeter(eng2,none) } 


KRKKKKKKKKEKKKRARREKRKKKRKKEKKKKRKEREERRREKRERKEKRKEKKEKKKE 


current operator: pos_landingi depth is: 6 
KEKKKKEKEKEEKKKKEKKEKRKEKRERREKEREREKEKKEKEKKEKEKEKRE 
operator preconditions have been met 
items being deleted are: faltitude(1000),airspeed(100) } 
items being added are: [{land(pos),altitude(0),airspeed(0)] 
operator preconditions have been met 
items being deleted are: []) 


items being added are: [land(pract) } 
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operator preconditions have been met 


The recommended operators are: {[confirm_engli_failure, 
confirm_nf2_failure, engl_off, genl_of€, pos_landingl, 
pract_landing_outranked1] 


The final state description is: [oil _press(engl,none), 
oil_press(eng2,o0k), revs(rotor,low), off(rain_rmv), 
off(master_arm), landing_zone(clear), full(throttlel), 
full(throttle2), off{master caution), automatic(govl), 


automatic(gov2), on(fuell), on(fuel2), normal(fuel_press), 
torque(engl,none), torque(eng2,erratic), torque(xmsn,low), 


torque(xmsn,erratic), revs(ngl,none), revs(ng2,erratic), 
revs(nf1l,none), revs(nf2,erratic), oil_temp(engl,ok), 
oil_temp( eng2,ok), failed(genl), full(fuel), off(scas), 
on(ecu), oil _temp(c_box,ok), oil _press(c_box,ok), 
oil _temo(xmsn,ok), oil_press(xmsn,ok), ammeter(genli,none), 
ammeter(gen2,ok), fuel press(ok), itt(engl,none), 
itt(eng2,erratic), oil_press(hyd_sys_1,0k), 
oil _ press(hyd_sys_2,0k), airspeed(100), altitude(1000), 
left_yaw] 
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APPENDIX D 


SOURCE CODE LISTING 


nowarnings 
code = 3500 
trail = 100 


J RRERRRRARARARAKKAAKRAKAKARAAKKS DOMAINS RARER AKRKKRRAKARAKA KARR AKARAKK A / 
domains 


/* The domains section contains the deciarations of the 
types and symbols used in this program 

-/ 

/* The caution panei cluster is reoresented by terms each 
corresponding £o a single light in the aizecrart 

be 


seqment = 
engl oil _oress; anaZ_oil oress; 
snqi-chip detr- enaz chip dexr; 
enaql Euei filter; eang2 fuel filter; 
de aen 1; 1c cena: 
xmsn_chip detr; CL DpOx enrpace Ga; 
temp_press_90; temp_press_42; 
chip _detr_90; chip_detr_ 42; 
xmsn_oil_hot; xmsn_oil_ press; xmsn_oil_byp; 
c_box_oil_press; c_box_oil_hot ; 
hyd_press_1; hyd press 2; 
hyd _temp_1; hyd_temp_2; 
ac_main; ac_stby ; 
engl_gov_man; eng2_gov_man; 
fire 1 pull; fire 2 pull; 
rpm_rotor_low; rpm_rotor_high; 
rpm_ngl; rpm_ng2 


segment_list = segment* 


73 

Aircraft weight and landing zone quality are represented 
by the follow- ing declarations. with respect to the scope 
of this implementation the weight can be one of two types 
and the zone quality can be one of three values. The nine 
different landing profiles and ergencies. A landing as a 
result of a malfunction could be described as land as_ soon 
as practical, soon as possible, or a landing via 
autorotation. Profiles can can be normal, high speed, 
sliding, steep, aircraft at max weight, or a landing to a 
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sloped zone. 
<7 
wt class = 
heavy ; moderate 


zone_quality = 
Clear ; confined ; slope 


type_landing = 
pract; pos; auto; 
normal; hiqh_ speed; slove; 
Slidina; max_weiqht; stee 


/* 

A component is defined as being any of the below listed 
names. Some of these components were noc utilized in the 
knowledace base. 

Ba 

component = 

enaqgl ; engqz ; xmsn ; c_DdOX 
Snemot sen ess > 
aeni : genz >; agovi | 'ovz 
master caution ; master_arm ; 
ecu 3; scas ; 
Fuel ; E~uell ; fuels ; uel press ; 
enrottle!l | enrote le a 
9ii_temp_90 ; oil _press_90 ; 
Oil _temp_42 ; oil_press_42 ; 
gear _box_90 ; gear_box_42 ; 
c_box_oil_press; c_box_oil_temp; 
xmsn_oil_ temp; xmsn_oil_ press ; 
hyd _sys_l; hyd_sys_2 ; hyd_press; 
hyd_temp_1; hyd_temp_ 2; 
rotor ; ngl 3; ngZ 3 "itwewiae itteZ >; 
nfl; nf£2 ; rain_rmv ; power ; 
main_inverter ; standby_inverter 


/* The aircraft's guages and instruments as seen by the 
pilot are refered to as components. A component has eight 
status values and are prioritized by a fact in the 


knowledge base. A given component may have more than one 
status true at any given time. For instance eng torque could 
be both ‘ok! and ‘decrease! simultaniously. 

“7, 


component_status = 
none ; high ; low ; 
increase ; decrease ; 
ok ; erratic ; respond 


/x 
A status list is a list of component status values. This 
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list established the priority of the status values 
a 


status_list = component_status* 


/* Some components are described as being in one of the 
following two modes. Each is mutually exclusive 
si as 

manual, 

automatic = mode 


/* A partial state description of the aircraft and it's 


environment at any given time is defined in terms of the 
following state elements. 
<p 


state _ element = 
prepare _for_failure(component) ; power (component_status); 


full(component); landing_zone(zone_quality); 
metal particles(component); Fuel obstruction(component) ; 
Fuel _press(component_status); automatic(componenc) ; 
manual(component); idle(component),; 

normal (component); decrease(component) ; 
faiied(component); hot (component) ; 
on(component); engaged(component) ; 
or=(component); fire(component) ; 
gross_weight(wt_class); airspeed(knots); 

arueitude (ft); oat(component_ status); 
land(type_landing); oil bypassing_cooler; 


itt(component,component_status); left_yaw; 
ammeter(component,component_status) ; 

revs( component, component_status); 
oil_press( component, component_status); 
oil _temp( component, component_status ); 
torque( component, component_status ) 


state list = state_element* 


/* Actions to be taken by the pilot or some action which 
must be taken to satisfy an immediate goal. The objective 
of this planner is to present the operators to the pilot 
as a possible diagnosis of the present state of affairs. A 
list of these operators are refered to as an op_list. 
m7) 
operator = 
normal_approach ; slope_landing ; steep_approach ; 
high_speed_approach ; max_weight_landing ; sliding_landing; 
pract_landing;pract_landing_outrankedl; 
pract_landing_outranked2;pos_landingl;pos_landing2; 
autorotation;confirm_engl_failure; confirm_eng2_failure; 
engage_scas ; ecu_off ; rain_rmv_off£— ; master_arm_off; 
govl1_to_manual;govl_to_automatic;confirm_nfl1_failure; 
check_ngl_overspeed ; check_ngl_underspeed ;gov2_to_manual; 
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gov2_to_automatic ;confirm_nf2_fallure;check_ng2_overspeed; 
check_ng2_underspeed ; throttlel_idle ; throttle2_idle; 
confirm_dual_eng_failure ; check_genl_fallure ; 
check_gen2_failure;genl_off; gen2_off; engl_off; eng2_off; 
pos_landing_outranked 


op_list = operator* 


[J RKKKKKEKKKEKEEREKKEKEKE DATABASE 2 KK KK KKK KKK EK KKK KKK KEK / 
database 


/* The database is contains only one fact and that is’ the 


list of goals that are asserted by scanning the’ caution 
lights and the instrument panel. The database is. only 
active during this process and the fact temp_goals is 


retracted prior to calling means_ends_analysis. 
“7 
tenp_goals (state_list) 


nest_level, 

percent, f£t, degrees, amos, 
lbs, knots, oat, value 

= integer 
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J RRR RRR KEKEKREKREKKKKEKEEE PREDICATES KRKKKKKKKKKKKKKKKKKEKEKEK / 
predicates 


problem_solver ( state_list,op_list,state_list ) 


/* predicates used directly in the means ends analysis 


procedure 

x/ i 
means_ends ( state_list,state_list,op_list, 

state_list,nest_level ) 
recommended ( state_list, state_list, operator ) 
precondition ( state_list, operator, state_list ) 
addpostcondition {( operator, state_list } 
( 


deietepostcondition Suave lst, operator, state _list ) 


/* predicates used to scan the cockpit for goals 
a7 


check _lights { state_iist, state_iist ) 
check guages { state_list ) 

check revs ( state_list j 

check pressures ( state_iist ) 

checx_temos ( state_iist } 

check torque ( state _iist ) 


master caution 
caution light 
secondary 


state Liste, state List 
state _ list, seqment ) 
state_list, segment) 


oo Ee ON 


create_goals 
ck duplicate 
pick_priority_set 
priority_set 
append_best_goal 


state_list ) 

state_element , state_list ) 
state_element, state_list ) 

state_list ) 

state_list, state_element ) 


CE ™ ~~ ™ 


below_limit status_list ) 


( 
changed ( status_list ) 
update ( state_list ) 
scan_panel ( segment_list, state_list ) 
segment_panel ( segment_list ) 


/* utilities 


*/ 
deleteitems ( state_list, state_list, state_list ) 
delete ( state_element, state_list, 
state_list ) 
union ( state_list, state_list, state_list ) 
append ( op_list, op_list, op_list ) 
difference ( state_list, state_list, state_list ) 
subset ( state_list, state_list ) 
member ( state_clement, state_list ) 
member 2 ( state_element, state_list ) 
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status_member ( component_status, status_list ) 


/*® test cases 


a7 
testi ( op_list,state_list ) 
test2 ({ op_list,state_list ) 
test3 ({ op_list,state_list ) 
test4 ( op_list,state_list ) 
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SP RRRRRKKKKKKKREKKREKRKKKK CLAUSES KKKKKKERKKRKRKKKKRKRRKKEKKEKEE / 


/* Problem_solver is the top level predicate from which all 


other predicates are called. The goals are initialized to 
empty. The guages are first searched for components in 
need of some type of response. Then the caution lights are 
searched. Once the goals have been asserted means_ends is 
called to present the operators necessary to solve the 
problem. 

ay 


problem_solver( State,Oplist,Goalstate ):- 
asserta(temp_goals({1])), 
check_guages(State ), 
check_lights(State, Goal_list),!, 
means_ends( State, Goal _ list, Oplist, 
Goalstate, 1 ),!. 


/* This recursive procedure has two rules. The first is a 
Single basis step, which in effect says stop with any 
state that includes all the goal facts. The second rule 
is the induction step which has two re- cursive calls: the 
Elie st for the preconditions, the second for the 
postconditions. A list of facts is computed that are 
different between the current state and the goal. The 
recommended facts are searched in order to find one whose 
goal is a subset of the goal list. I£ so then retrieve the 
preconditions of the operator, and recursively call means 
ends to resolve the differences. Once the preconditions 
have been satisfied the deletepostcondition facts are 


deleted from the final state resulting from the precondition 
recursion. Then the addpostcondition facts are retrieved and 
added to the state. This determines the state after the 
operator application. This process is done recursively 
until all preconditions have been satisfied. The final 
operator list for the whole problem is-~ the appending 
together of the precondition-recursion operator list, the 
recommended operator, and the postcondition operator list. 
Sh 
means_ends( State, Goal_list, [J], State, N ) :- 
difference( Goal_list, State, [] ), 
write("operator preconditions have been met"), 
nl,nl. 


means_ends( State, Goal_list, Oplist, Goalstate, N ) :- 
difference( Goal_list, State, D ), 
write("Goal list is: ",Goal_list),nl,nl, 
write("difference:",D),nl,nl, 
recommended( State, Dsub, Operator ), 
subset( Dsub, D ), 
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WLLite (KKK KKKKKKKKKKKKKKEKKEKEKKEEKKEREKRKEKKEEEEN ) " 
nijnw: 
write("current operator: ",Operator), 
write(" depth is: ", N®) ,nl 7a 
wr ite ( WKH KHHKKKKKKRKKKREKEKERKREKKREEKREREKEEEE"N ) ‘ 
ni,nl, 
precondition( State, Operator, Prelist ), 
N2 =N +1, 
means_ends( State, Prelist, Preoplist, 
Prestate, N2 ), 
deletepostcondition( State, Operator, 
Deletepostlist ), 
deleteitems( Deletepostlist, Prestate, 
Prestate2 ), 
write("items being deleted are: ", 
Deletepostlist),nl,nl, 
addpostcondition( Operator, Addpostlist ), 
write("items being added are: ", 
Addpostlist),nl,nl, 
union( Addpostlist, Prestate2, Postlist ), 
means_ends(Postlist, Goal_list, Postoplist, 
Goalstate, N2 ), 
append( Preoplist, [ Operator | Postoplist ], 
Oplist ),!. 


/* ‘ereate goals' is a control structure that provides a 
way to generate goals from within the program. Before 
goals are appended to the goal list, they are checked 
against other goals in the same class to eliminate the 
appending of duplicates. Each class is a list of prioritized 
state elements. If a goal of a higher priority has already 
been appended then the goal under con- sideration will not 
be appended. create goals looks at the first of the goals 
to be considered. If a duplicate already exists in the 
present goal list the ck_duplicate fails and create_goals 
is called again to consider the next goal. If there are no 
duplicates, append_best_goal checks to see if another 
goal of a higher priority within the same class has 
already been asserted.I£ no higher goal has been asserted 
then append _best_goal adds the new goal to the new goal 
list. 
a7 

create_goals( [] ):- !. /* succedes when no goals are 

specified. */ 


create_goals( [GliRest] ) :- 
temp_goals(Current_goals ), 
ck duplicate( Gl, Current_goals ), 
pick_priority_set(Gl, Set ), 
append best_goal(Set,Gl), 
create_goals( Rest ),!. 
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create_goals( [(GlilRest) ) :- !, create_goals( Rest ). 
ck duplicate( X, L ) :- not( member ( X, L )). 


/* before a goal is asserted into the goal list it is 
checked against other goals in its priority set to see if 
a goal of a higher priority has already been asserted. Any 
goal which is not explicitly listed in a priority set fact 
is assumed to be the only member in it's class. 
a/ 
piewW oriority (set( xX, C )}) :- Briority_set( C }, 
member{ X, CC}. 
pick oriority_set({ X, {Xi }. /* detauit ror singleton sets 
hu 


/* f= the highest priority item matches the soai then 
append it. check to see if a aigher oroizrity goal has 
peen asserted. The orocedure stoops at the hAigqner oriority 
goai if already asserted 
a 

append dest _goaij [(SingqieSoai!Restset!],SingleGoal } :- 
temo cgoais(Current _goais), 
update((SingleGoaliCurzrent_goaisi),!:. 
f/* asseztion */ 
append bdest_goail({ iSijRestSet],Single_goal ) :;:- 
/* no assertion */ 
temp_goals(Current_goals), 
ck_duplicate( S1,Current_goals ), 
append_best_goal( RestSet,Single_goal ). 


update( New_goals ) :- 
retract(temp_goals(_)), 
asserta(temp_goals(New_goals)),!. 


difference((),S,[]). 

difference( [ P | G ], S, G2 ) :- 
member( P, S ), !, 
difference( G, S, G2 ). 

difference( [ P | G ], S, € P { G2) ) :- 
difference( G, S, G2 ). 


subset( [J], L ). 

subset( [ X {| L ], L2 ) :- 
member( X, L2 ), 
subset( L, L2 ). 


member( X, ({ X IL } 
member( X, [— Y | L } 


a ie, 
) s- member( X, L ). 


? 
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member2( X, Xo|. baie 

member2( X, Y ib) ) :- member2( X, L ). 

) v= 

) :- status_member( X, L ). 


status_member( X, ( X 1 L 
status_member( X, { Y 1 L 


tec? te? 


append( (), L, L ). 
append( { X | L }, L2, { X 1 L3 ) ) :- 
append( L, L2, L3 ). 


union( []) 
union( { 


Rind “eee” 
@ 


, be, eS ) :> newmber( Bele Je. 
union( £1, L2, L3 ). 
uniont f° ' Li ji, G2, eet usa} ys 
union{ L242, L2, L3 ). 


deleteitems( i{J, L, L ). 

Geieteitems( { xX } i j, L2, L3 ) :- 
deiete( XX, 6&2, b4 ), 
deieteitems( L, t4, L3 }. 


deiete( xX, {(3, : 
deiete (51 ms L ji, M) T- +t, @erfece( &<. Ll, 4). 
delete( K,i ¥£ } & I, € £ 4 Hal ) t- tetetet 2, Le we 


/* The performance guages are the primary area of interest 
and involve the temperatures, pressures, torque,and RPM's of 
various components. 
nf 
check_guages( State ) :- 
check revs( State ), 
check_pressures( State ), 
check _temps( State ), 
check _torque( State ). 


/* The rules check _revs,check_pressures,check_temps,and 
check torque are very similar. Each guage is checked for a 
change in value. A change in value requires a response of 
some sort. The goal is to respond to the guage or light in 
question. 
“7 
check_revs( State ) :- 
member2(revs(Guage, Value ), State ), 
changed(Up_or_Down), 
status_member(Value,Up_or_Down), 
write("revs(",Guage,", " Value,")"),ni,nl, 
create_goals({revs(Guage,respond)}),fail. 
check_revs( State ). 
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check _pressures( State ) ;:- 
member2(oil_press(Guage, Value ), State ), 
changed(Up_or_Down), 
status_member (Value,Up_or_Down), 
write("oil press(",Guage,", ",Value,")" ), 
ni,nil, 
create_goals([oil_press(Guage,respond))),fail. 
check _pressures( State ). 


check temps( State ) :- 
member2(oil_ temp(Guage, Value ), State ), 
changed(Up_or_Down), 
status_member(Value,Up_or_ Down), 
write("oil temp(",Guage,", ",Value,")" ), 
ni,nl, 
create_goals({0il_temp(Guage,respond)])),fail. 
check _temps( State ). 


check_torque{ State ) :- 
member2(torque(Guage, Value ), State ), 
changed (Up_or_ Down), 
status_member (Value,Uvo_or_Down), 
write("torgque(",Guage,", ",Value,")" ), 
nivanl; 

create goais({torque(Guage,respond))),fail. 
check tozrque( State ). 


/* check_lights goes through all the caution lights’ and 
accumulates all the goals necessary to correct the present 
state with respect to the caution panel. 
x7 
check_lights( State,Goal_list ) :- 
segment _panel(Cluster), 
scan_panel(Cluster,State). 
check_lights( State, Goal_list ) :- 
temp_goals(Goal_list), 
retract(temp_goals(_)). 


/* scan_panel calls each caution light in the punel 
old 
scan_panel({},State):-!,fail. 
scan_panel((Seg/Tail),State):- 
caution_light(State,Seg),!, 
scan_panel(Tail,State). 
scan_panel({Seg/Tail),State):-scan_panel(Tail,State). 
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[RREKEKKKKKEKECAUTION AND WARNING LIGHTS *®##®® RR KKK RR / 


segment _panel({ engl_oil_ press, eng2_oil_press, 
engl_chip_detr, eng2_chip_detr, 
engl_fuel_ filter, eng2_fuel filter, 
dc_gen_l, dc_gen_2, 
xmsn_chip detr, c_box_chip detr, 

_ temp_press_90, temp_press_42, 

chip_detr_90, chip_detr_42, 
xmsn_oil hot, xmsn_oil press, 
c_box_oil press, c_box_oil_hot , 
hyd _press_l, hyd_press_2, 
hyd _temp_1, hyd _temp_2, 
ac_main, ac_stby , 
engl _gov_man, eng2_gov_man, 
fire 1 pull, fire _2 pull, 
rpm_rotor_low, rpm_rotor_high, 
rpm_ngl, rpm_ng2, 


xmsn_oil_byp }). 


/* The master_caution light is illuminated if there exists 
any caution light that is on 
x7 
master caution( State, Goal_list ) :- 
caution_light( State, _ ). 


/* Listed below are the rules for each caution light. Each 
caution light has its own goals to assert and in some cases 
secondary indications are necessary to choose the 
appropriate goals. All sensor information is assumed true 
and is not questioned. This assumption eliminates cross- 
checking requirements. 
<7, 
caution_light( State, engl_oil_ press):- 
member(oil press( engl, X ), State ), 
below_limit(L), status_member(X,L), 
write( " Caution light: engl_oil_press" ),nl, 
create_goals(({ off(engil), land(pract) ] ). 


caution_light( State, engl_chip detr ):- 
member (metal particles(engl), State ), 
write( ® Caution light: engl_chip detr " ),nl, 
secondary(State, engl_chip detr). 


caution_light( State, eng2_oil_press ):- 
member (oil press( eng2, X ), State ), 
below_limit(L), status_member(X,L), 
write( “" Caution light: eng2_oil press" ),nl, 
create_goals({ off(eng2), land(pract) ] ). 


caution_light( State, eng2_chip_detr ):- 


64 


member (metal particles(eng2), State ), 
write( “ Caution light: eng2_chip_detr " ),nl, 
secondary(State, eng2_chip_detr). 


caution_light( State, engi_fuel filter ):- 
member (fuel _obstruction(engl), State), 
write( " Caution light: engi_fuel_filter "),nl, 
create_goals({prepare_for_failure(engl), 
land(pract) ) ). 


caution_light( State, eng2_fuei_ filter ):- 
memoer {fuel costructionieng2), State}, 
write({ " Caution liaqnt: engZ_ suei_filter *),ni, 
create daoais({prerare_for_failure(end2), 
land(pract) ] ). 


caution_liqht( State, dc_gen_1l ):- 
Memper{ori{genli), State }, 
write( " Caution iianht: de_gen_i" j),al, 
create sgoais{{] ). 
caution_liqnt( State, dc_gen_i }:- 
memper {failed({qgeni), State), 
weite( * Caution Light: dce_gen_i * ),ni, 
cxeate goais({ oftigeni) } ). 


caution_lignt( State, dc_gen_2 ):- 
member (off(gen2), State ), 
write( “ Caution light: dc_gen_2 " ),nl, 
create_goals({]} ). 


caution_light( State, dc_gen_2 ):- 
member (failed(gen2), State), 
write( " Caution light: dc_gen_2 " ),nl, 
create_goals({ off(gen2) ) ). 


caution_light( State, xmsn_chip_detr ):- 
member(metal particles( xmsn ), State ), 
write( " Caution light: xmsn_chip_detr ™ ),nl, 
secondary(State, xmsn_chip_detr). 


caution_light( State, c_box_chip_detr ):- 
member (metal _particles( c_box ), State ), 
write( " Caution light: c_box_chip _detr " ),nl, 
create_goals({power(decrease),land(pos) ) ). 


caution_light( State, temp_press_90 ):- 
member (oil _temp( gear_box_90, high ), State ), 
write( " Caution light: temp_press_90 " ),nl, 
create_goals({ land(pos) ] ). 
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cautlion_light( State, temp_press_90 ):- 
member (oil press( gear_box_90, X ), State ), 
below_lLimit(L), status_member(X,L), 
write( " Caution light: temp_press_90 " ),nl, 
create_goals({ land(pos) } ). 


caution_light( State, temp_press_42 ):- 
member(oil temp( gear_box_42, high ), State ), 
write( " Caution light: temo_press_42 " ),nl, 
create _goals({ land(pos) } ). 


caution_light( State, tamo_press_42 ):- 
member(oil oress( gear _d0x_42, X ), State ), 
Delow_limit(L), status_memper(X%,L), 
write{ ™ Caution light: temp_press_42 " ),nl, 
create_goais([{ land(pos) } }. 


caution_lignt( State, chipo_detr_30 }:- 
member (metal particles(qear_box_90),State ), 
write({ "* Caution light: chin_detz_90 "* ),ai, 
cxeate_goais( ipower (decrease),iand(pract))}). 


caution_lignht( State, chin_detr_42 }):- 
memper (metal particies(qear_pdox_42 ),State 
writsi ™ Cautlon PiIsgnt; eniep gece 42 " ),al, 
Create goais( {power /(decrease),land(pract)) ). 


caution_light( State, xmsn_oil_hot ):- 
member(oil temp( xmsn, high ), State ), 
write( " Caution light: xmsn_oil_hot " ),nl, 
create_goals({ power(decrease), 
prepare for_failure(xmsn), 
land(pos) j) ). 


caution_light( State, xmsn_oil_press ):- 
member(oil_press( xmsn, X ), State ), 
below_limit(L), status_member(Xx,L), 
write( " Caution light: xmsn_oil_press " ),nl, 
create_goals({ power(decrease), 
prepare_for_failure(xmsn), 
land(pos) ] ). 


caution_light( State, c_box_oil_press ):- 
member(oil press( c_box, high ), State ), 
write( " Caution light: c_box_oil_press " ),nl, 
create_goals({ power(decrease), land(pos) ) ). 


caution_light( State, c_box_oil_hot ):- 
member(oil_temp( c_box, high ), State ), 
write( " Caution light: c_box_oil_hot " ),nl, 
create_goals({ power(decrease), land(pos) ] ). 
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caution_light( State, hyd_press_1 ):- 
member(oil press( hyd_sys_1, X ), State ), 
below_limit(L), status_member(X,L), 
write( " Caution light: hyd_press_1"™ ),nl, 
create _goals(({ off€(hyd_sys_1),land(pos) ]} ). 


caution_light( State, hyd_press_2 ):- 
member(oil press( hyd_sys_2, X ), State ), 
below_limit(L), status_member(X,L), 
write( " Caution light: hyd_press_2 " ),nl, 
Create _goals({ off(hyd_sys_2),land(pos) ]} ). 


caution_light( State, hyd_temp_1 ):- 
member(oil_temp( hyd_sys_1, high ), State ), 
write( " Caution light: hyd_temp_1 "” ),nl, 
create _goals({ off(hyd_sys_1),land(pos) ]} ). 


caution_light( State, hyd_temp_2 ):- 
member(oil temp( hyd_sys_2, high ), State ), 
write( * Caution light: hyd_temp_2 " ),nl, 
Create_goals({ off(hyd_sys_2),land(pos) ]} ). 


caution_light({ State, xmsn_oil_byp ):- 
member(oil_bypassing_cooler, State ), 
write( " Caution Light: xmsn_oil_byp *" ),qal, 
create_goals({power (decrease), 
prepare for _ failure(xmsn), 
land(pos) ) ). 


caution_light( State, ac_main ):- 
member (failed( main_inverter ), State ), 
write( " Caution light: ac_main "™ ),nl, 
create_goals({] ). /* not implemented */ 


caution_light( State, ac_stby ):- 
member(failed( standby_inverter ), State ), 
write( " Caution light: ac_stby " ),nl, 
create_goals({} ). /* not implemented */ 


caution_light( State, engil_gov_man ):- 
member (manual( govl), State ), . 
write( “" Caution light: engl_gov_man ),nl, 
create_goals([(} )./* no goal required */ 


caution_light( State, eng2_gov_man ):- 
member (manual( gov2), State ), 
write( " Caution light: eng2_gov_man " ),nl, 
create_goals(({] )./* no goal required */ 


caution_light( State, f£ire_1_ pull ):- 
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member(fire( engl ), State ), 
write( " Caution light: fire_1 pull " ),nl, 
create_goals(({] ). 


caution_light( State, fire 2 pull ):- 
member(fire( eng2 ), State ), 
write( " Caution light: fire_2_ pull “ ),nl, 
create_goals({) ). 


caution_light( State, rpm_ngl ):- 
member(revs( ngl, X ), State ), 
below_limit(L), status_member(X,L), 
write( " Caution light: rpm_ngl " ),nl, 
create_goals({ revs(ngl,respond) ] ). 


caution_light( State, rpm_ng2 ):- 
member(revs( ng2, X ), State ), 
below_limit(L), status_member(X,L), 
write( " Caution light: rpm_ng2 " ),nl, 
create _goals({ revs(ng2,resvond) ]} ). 


caution_light( State, rpm_rotor_low ):- 
member(revs({ rotor, low ), State ), 
write( " Caution light: rpm_rotor_low " ),nl, 
create goals({({ revs(rotor,resoond) } ). 


caution_light({ State, rpm_rotor_high ):- 
member(revs( rotor, high ), State ), 
write( " Caution light: rpm_rotor_high " ),nl, 
create_goals({ revs(rotor,respond) ]j ). 


/* secondary state-requirements for certain caution lights 
are expressed below. 
a 
secondary(State, engl_chip_detr) :- 
member(oil press(engl, X ), State ), 
below_limit(L), status_member(X,L), 
create_goals(( off(engl),land(pract)) ). 
secondary(State, engl_chip _detr) :- 
member(oil temp(engl, high), State ), 
create_goals({ off(engl),land(pract)] ). 
secondary(State, engl_chip _detr) :- 
create_goals(( idle(throttlel),land(pract)] ). 


secondary(State, eng2_chip detr) :- 
member(oil_ press(eng2, X ), State ), 
below_limit(L), status_member(X,L), 
create_goals({ off(eng2),land(pract)] ). 
secondary(State, eng2_chip_detr) :- 
member(oil temp(eng2, high), State ), 
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create_goals({ off(eng2),land(pract)] ). 
secondary(State, eng2_chip _detr) :- 
create_goals({ idle(throttle2),land(pract)] ). 


secondary(State, xmsn_chip_detr) :- 
member (oil temp(xmsn,high), State), 
create _goals((prepare_for_failure(xmsn), 
land(pos)) ). 
secondary(State, xmsn_chip_detr) :- 
member(oil voress(xmsn,X ), State), 
below_limit(L), status_member(X,1L), 
create goals({prenare for failure(xmsn), 
liand(pos)])] }. 
secondary(State, xmsn_chip_detr) :- 
create_goals({[{ land{pos)} ). 


changed([{erratic,increase,decrease}). 


below_limit({fnone,iow!). 
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LERKKREKRE KER KEE EEE reCommended Operators >>>>>>>>553>>>>>%/ 


/* The recommended facts gives the operator to apply to 
achieve the goals listed. The order in which these facts are 
listed is crutial to the over all performance of the 


planner. Those 


satisty come 


opeators that are the most difficult to 


before those that are eaiser. Operators are 


also listed in order of urgency. A given goal may have more 
than one operator that is suitable. These operators are 
ordered in the same manner as above. 


/ 


recommended( State, [{revs(na2,respond),zvevs(naqi,zrespond), 


ofé{gcni),of€E(genzZ), 
ot=(engi),offi(engq2),land(pract) 1, 


confirm_dual_eng_failure ). 


recommended( State, {frevs(rotor,respond) i, 
contizm_eng2_ failure). 


recommended ( 


State, izevs(zotor,zespond)}, 


contirm_engi_tailiure). 
recormmended( State, izevs(zrotor,xesoond)!}, 
govi_ cto_manuai). 


recommended ( 


State, {revs(rotor,zesoond)}, 


gov2_to_manual). 


recommenced ( 


State, ({torque‘{xmsn,zesoond)], 


check _ngi_underspeed). 
recommended( State, [torque(xmsn,respond)], 
check_ng2_underspeed). 


recommended( State, [torque(engl,respond)), 
confirm_nfi_ failure). 

recommended( State, [torque(engl,respond)], 
check_ngl_overspeed). 

recommended( State, [torque(engl,respond)], 
check_ngi_underspeed). 


recommended( State, ([(torque(eng2,respond)], 
confirm_nf2_failure). 

recommended( State, [torque(eng2,respond)], 
check_ng2_overspeed). 

recommended( State, [torque(eng2,respond)], 
check_ng2_underspeed). 


recommended( State, [revs(ngl,respond)]), 
govl_to_manual). 


recommended( State, [(revs(nf1,respond)]), 
govl_to_manual). 


recommended( State, frevs(ng2,respond)], 


70 


gov2_to_manual). 


recommended ( 


State, 


(revs(nf£2,respond)], 


gov2_to_manual). 


recommended ( 


recommended ( 


State, 


State, 


{land(auto)], autorotation). 


(failed(eng2)]), 


confirm_eng2_failure). 


recommended ( 


State, 


(failed(engl)], 


confirm_engl_failure). 


recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 


recommended ( 
recommended ( 


recommended ( 
recommended ( 


recommended ( 


recommended ( 
recommended ( 


recommended ( 
recomme nded ( 


recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 


recommended ( 
recommended ( 
recomme nded ( 
recommended ( 


recommended ( 


recomme nded ( 
recommended ( 


State, 
State, 
State, 
State, 
State, 
State, 


State, 
State, 


State, 
State, 


State, 


State, 
State, 


State, 
State, 


State, 
State, 
State, 
State, 
State, 
State, 
State, 


State, 
State, 
State, 


State, 


(failed(govi)}],confirm_nfl_failure). 
(failed(govl)),check_ngl_overspeed). 
({failed(gov1))],check_ngl_underspeed). 
{(failed(gov2)),confirm_nf2_failure). 
(failed(gov2)],check_ng2_overspeed). 
(failed(gov2))],check_ng2_underspeed). 


{itt(engl,respond)],govl_to_manual). 
{itt(eng2,respond)}], gov2_to_manual). 


{failed(genl)}),check_genl_faiiure). 
{(failed(gen2)], check_gen2_ failure). 
{engaged(scas)]}, engage _scas ). 


{automatic(gov2))],gov2_to_ automatic). 
{automatic(govl)]),govl_to_automatic). 


(idle(throttlel))],throttlel_idle ). 
(idle(throttle2)],throttle2_ idle ). 


{off(engl)]), engl _off }. 
(of££E(eng2)]), eng2_off ). 
foff(ecu)]), ecu_off ). 

(of£(genl)], genl_off ). 


{of£(gen2)], 
(of£(rain_rmv)], 
{off(master_arm)], 


gen2 off ). 
rain_rmv_ofe€E ). 
master_arm_off ). 


{land(pos)1],pos_landing_outranked ). 
{land(pos)], pos_landingl ). 
{land(pos)], pos_landing2 ). 


(land(pract)], 


pract_landing_outrankedil )}. 


State, 


State, 
State, 


{(land(pract)], pract_landing ). 


(land(normal)], 
{land(slope)], 


normal_approach ). 
slope_landing }. 
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recommended( State, [land(steep)], steep_approach ). 
recommended( State, (land(high_speed)], 
high_speed_approach ). 
recommended( State, (land(max_weight)], 
max _weight_landing ). 
recommended( State, [(land(sliding)], Sliding_landing ). 
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TER KKK KR KR KKK EER KKK preconditions >>>>>>>>>>>>>>>>>>>%/ 


/* The preconditions for the application of operators are 
defined in these facts 
a 

precondition( State, genl_off£ ,()). 


precondition( State, gen2_off ,(}). 
precondition( State, engl_off ,{})). 
- precondition( State, engq2_ off ,{[}}). 


precondition( State, check _genl_ failure ,fon(genl), 
ammeter(engi,none)}). 


precondition{ State, check _gen2_ failure ,{fon(gen2), 
ammeter({(eng2,none) i). 


precondition( State, govi_to_manual, 
{automatic(govi), automatic(gove2), 
failed(qovi), idle(throttiel)]). 


orecondition( State, govi_tco_automatic, 
{idle(throcttlel),manual(dqovi)!). 


precondition({ State, conrirm_nti_failure, 
(revs(ngl,erratic),itt(engl,erratic), 
revs(nfl,erratic), 
torque(engl,erratic), automatic(govl))). 


precondition( State, check_ngl_underspeed, 
(revs (ngl,decrease),revs(nf1,decrease), 
torque (engl,decrease),automatic(govl)]}). 


precondition( State, check_ngl_overspeed, 
{revs(ngl, increase),revs(nfl1,increase), 
torque (engl, increase),automatic(govl))). 


precondition( State, gov2_to_manual, 
(automatic(gov2), automatic(govl), 
failed(gov2), idle(throttle2)]). 


precondition( State, gov2_to_automatic, 
(idle(throttle2),manual(gov2))). 


precondition( State, confirm_nf2_failure, 
(revs(ng2,erratic),itt(eng2,erratic), 
revs(nf2,erratic),torque(eng2,erratic), 
automatic(gov2)]}). 
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precondition( State, check_ng2_underspeed, 
{revs(ng2,decrease),revs(nf2,decrease), 
torque(eng2,decrease),automatic(gov2)]). 


precondition( State, check_ng2_overspeed, 
{revs(ng2,increase),revs(nf2,increase), 
torgque(eng2,increase),automatic(gov2)]). 


precondition ( 


orecondition( 


= 


precondition( 


9recondition{ 


9recondition( 


9reconditrion( 


precondition( 


precondition( 


precondition( 


precondition ( 


precondition( 


{ revs( rotor, 
engaged( scas ),of£f({ ecu ),off( rain_rmv ), 
off(master_arm ), 

landing_zone(slope),gross_weight(moderate)]). 


State, autorotation, (failed(engl), 


failed(eng2))}). 

State, niagn_sveed_ aporoach,{ fire({_)j). 

State, max_weight_landing, 

{ gross_weight(heavy), 
landing_zone(clear)})). 

State, sliding_landing, [{power(iow), 

landing_zone(ciear)}). 


State, oos_landina_outranked, 
{land(auto)}). 


Stata, pos_\landingi, 
[failed(engli)j). 


State, pos_landing2, 
(failed(eng2))). 


State, pract_landing, 
([landing_zone(clear)]). 


State, pract_landing_outrankedl, 
{land(pos)]). 


State, normal_approach, 

{ revs( rotor, ok ), off({ master_caution ), 
engaged( scas ),off(ecu),of£(rain_rmv), 
off( master_arm ), landing_zone(clear)})). 


State, slope_landing, 


ok ), off( master_caution ), 


precondition( State, confirm_engl_failure, 


{torque(engl,none), 
revs(nfl,none), 
itt(engl,none), 


torque(xmsn,low), revs(ngl,none), 
oil press(engl,none), failed(genl), 
left_yaw, on(fuell),full(throttlel), 
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revs(rotor,low)]}). 


precondition( State, confirm_eng2_failure, 
{torque(eng2,none), torque(xmsn, low),revs(ng2,none), 
revs(n£2,none), oil _press(eng2,none), failed(gen2), 
itt(eng2,none), left_yaw, on(fuel2), full(throttle2), 
revs (rotor, low)])). 


precondition( State, confirm_dual_eng_failure, 
{ oil press(engl,none), oil_press(eng2,none), 
revs(rotor,low), full(throttlel), full(throttle2), 
on({fuell), on(fuel2), torque(engl,none), 
torque(eng2,none), torque(xmsn,low), revs(ngl,none), 
revs(ng2,none), revs(nfi,none), revs(nf2,none), 
failed(genl), failed(gen2),of£(scas),itt(engl,none), 
itt(eng2,none), left_yaw ]). 


precondition({ State, engage_scas,[] ). 
precondition( State, ecu_off,[] ). 
precondition( State, rain_rmv_off,{(])). 
precondition( State, master_arm_off,{]). 
pDrecondition( State, throttlel_idle,{)). 
precondition({ State, throttle2_ idie,{)). 
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LEK KKK RK EK KEK KKK deletepostconditions >>>>>>>>>>>>>>>>%/ 
/* The respective state elements to be deleted from the 
state description, for each operator are defined in these 
facts. 
bs! 
deletepostcondition( State, genl_off, fon(genl)] ). 
deletepostcondition( State, gen2_off, {f{on(gen2)] ). 
delietepostcondition( State, engl_off, {on(engl)]) ). 
deletepostcondition( State, eng2_off, fon(eng2)] ). 
deletepostcondition( State,check_genl_failure,[{on(genl)]). 


Geletepostcondition( State,check_gen2_failure,{on(gen2)]})). 


deletepostcondition( State, confirm_engl_failure, 
{on(ecu)] ). 


deletepostcondition( State, confirm_eng2_failure, 
{on(ecu)j ). 


deietepostcondition( State, confirm_dual_eng_failure, 
{on(ecu)] ). 


deletepostcondition( State,govl_to_ manual, 
{automatic(govl), idle(throttlel), 
revs(ngl,_), itt(engl,_), 
revs(nfl,_),revs(rotor,_), 
torque(engl,_)])). 


deletepostcondition( State,govi_to_ automatic, 
(manual (govl1),manual(throttlel)]). 


deletepostcondition( State,confirm_nf£1_failure,(]). 
deletepostcondition( State,check_ngl_underspeed,I)}). 
deletepostcondition( State,check_ngl_overspeed,([]). 
deletepostcondition( State,gov2_to manual, 
{automatic(gov2),idle(throttle2),revs(ng2,_), 
itt(eng2,_),revs(n£2,_),revs(rotor,_), 


torque(engZ,_)]). 


deletepostcondition( State,gov2_to_automatic, 
(manual (gov2),manual(throttle2)]). 
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deletepostcondition( State,confirm_nf2_failure,(]). 
deletepostcondition( State,check_ng2_underspeed,[]). 
deletepostcondition( State,check_ng2_overspeed,[]). 


deletepostcondition( State, throttlel_idle, 
{full(throttlel))). 


deletepostcondition( State, throttile2_idie, 
(full(throttle2))}). 


dGeletesostcondition( State, ecu_off, [fon(ecu})i}. 
deietepostcondition( State, engage_scas, [{ofr{scas)]}). 
deletepostcondition( State, rain_rmv_offt, {(on(rain_rmv)}). 


deletepostcondition( State, master_arm_ofci, 
fon(master_arm)j). 


deieteposctcondition( State, aormai_aooroach, [{aititude(_), 
aizsveed( _)j). 


deletepostcondition( State, slove_landing, faititude({ _), 
aizspneed{_)}). 


deletepostcondition( State, steep_approach, [altitude(_), 
airspeed(_))). 


deletepostcondition( State, high_speed_approach, 
{altitude(_), airspeed(_)}). 


deletepostcondition( State, max_weight_landing, 
{altitude(_), airspeed(_))). 


deletepostcondition( State, sliding_landing, 
{altitude(_), airspeed(_)]). 


deletepostcondition( State, pract_landing_outrankedl, 
Ele 


deletepostcondition( State, pract_landing, 
[altitude(_), airspeed(_))). 


deletepostcondition( State, pos_landing_outranked, 
(}). 


deletepostcondition( State, pos_landingl, 
{altitude(_), airspeed({_))). 
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deletepostcondition( State, pos_landing2, 
(altitude(_), airspeed(_)]}). 


deletepostcondition( State, autorotation, 


(full(throttlel), full(throttle2),airspeed(_), 
altitude(_), revs(rotor,_)]). 
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IEKK KKK KKK KKK KKK KKK addpostconditions >>>>>>>>>>>>>>>>>>%/ 


/* The respective state elements to be added to the _ state 
description, for each operator are defined in these facts. 


=/ 


addpostcondition( check_genl_failure, 
{ of £(genl),failed(genl))). 


addpostcondition( check_gen2_failure, 
{( of £(gen2),failed(gen2)}). 


addpostcondition( genl_off, 
{ of f£(geni) }). 


addpostcondition( gen2_off, 
( of f(gen2) 1]). 


addpostcondition( engi_off, 
{( of f(engi) ]). 


addpostcondition( eng2_offt, 
{ of£€(eng2) ji). 


addpostcondition( autorotation, 
(idle(throttlel), idle(throttle2), 
airspeed(0), altitude(0),revs(rotor,respond), 
land(auto))). 


addpostcondition( confirm_engl_failure, 
{ of€(ecu), failed(engl),revs(ngl,respond), 
revs(nf1,respond), revs (rotor,respond), 
itt(engl,respond), torque(engl,respond), 
torque(xmsn,respond)})). 


addpostcondition( confirm_eng2_failure, 
{ off (ecu),failed(eng2),revs(ng2,respond), 
revs(nf£2,respond), revs(rotor,respond), 
itt(eng2,respond), torque(eng2,respond), 
torque(xmsn,respond)]). 


addpostcondition( confirm_dual_eng_failure, 
{ off (ecu), failed(engl),failed(eng2),of£(genl), 
off(gen2), off(engl), off(eng2), revs(ngl,respond), 
revs(nfl,respond), revs(rotor,respond), 
itt(engl,respond), itt(eng2,respond), 
revs(ng2,respond), revs(nf£2,respond)]). 


addpostcondition(govl1_to_manual, 
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(manual(govl), manual(throttlel), 
revs(ngl,ok), itt(engl,ok), revs(nf1,0k), 
revs(rotor,ok), torque(engl,ok), 
torque(engl,respond), revs(ngl,respond), 
revs(nf1,respond),revs(rotor,respond), 
itt(engl,respond)}). 


addpostcondition(govl_to_automatic, fautomatic(govl)]). 


addpostcondition(confirm_nfl_failure,l(lrevs(ngl,respond), 
revs(nfl,respond), failed(govl), 
torque(engl,respond)])). 


addpostcondition(check_ngl_underspeed, {revs(ngl,respond), 
revs(nfl,respond), failed(govl), 
torque(engl,respond)])). 


addpostcondiction(check_ngl_overspeed, {(revs(ngl1,respond), 
revs(nfi,respond), failed(govl), 
torque(engl,respond)!]). 


addpostcondition(gov2_to manual, 
(manual(gov2), manual(throttle2), revs(ng2,o0k), 
itt(eng2,oxk),revs(nf2,0k),revs(rotor,ok), 
torque (eng2,ok),torque(eng2,respond), 
revs(ng2,respond), revs(ntf2,respond), 
revs (rotor,respond),itt(eng2,respond))). 
addpostcondition(gov2_to_automatic, [fautomatic(gov2)]). 
addpostcondition(confirm_nf2_failure,(revs(ng2,respond), 
revs(nf2,respond), failed(gov2), 
torque(eng2,respond)]). 
addpostcondition(check_ng2_underspeed, [revs(ng2,respond), 
revs(nf£2,respond), failed(gov2), 
torque(eng2,respond)]). 
addpostcondition(check_ng2_overspeed,lrevs(ng2,respond), 
revs(nf2,respond), failed(gov2), 
torque(eng2,respond)]). 
addpostcondition( throttlel_idle, ({ idle( throttlel)]). 
addpostcondition( throttle2_idle, [( idle( throttle2)]). 
addpostcondition( ecu_off, loff(ecu)])). 
addpostcondition( engage_scas, [engaged(scas)]}). 


addpostcondition( rain_rmv_off, [(off(rain_rmv)]). 
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addpostcondition( master_arm_off, l(off(master_arm)]). 


addpostcondition( normal_approach, 
(land(normal), altitude(0), airspeed(0)]). 


addpostcondition( slope_landing, 
{land(slope), altitude(0), airspeed(0))). 


addpostcondition( steeno_approach, 
{land(steep), altitude(0), airspeed(09)}). 


addpvostcondition( niqh_sveed_ approach, 
{land(high_speed), altitude(0), aixrspeed(9)!). 


addpostcondition( max_weight_landing, 
{land(max_weight), altitude(0), airspneed(9)}). 


addvostcondition( sliding_landing, 
fland(siiding), altitude(0), airsveed(0)!]). 


addpostcondition( oos_landing_outzanked, 
liand{ pes )@.- 


addpostconditiont vos_landingli, 
{iand(pos}, altitude(0), aixrspneed({(0)i). 


addpostcondition( pos_landing2, 
(land(pos), altitude(0), airspeed(0))). 


addpostcondition( pract_landing, 
{(land(pract), altitude(0), airspeed(0)j). 


addpostcondition( pract_landing_outrankedl, 
{land(pract)])). 


81 


TERK KKK KERR RR RRR SSK PRIORITY SETS 9>>>>>>>>>>>>>>>>>>>%/ 


/* These sets define the relative priority among its 
elements. If an element of a higher priority has. been 
asserted as a goal no lower priority elements will be 
asserted. 
a7 

priority set({ failed(engl), off(engl)]). 


priority_set({ failed(eng2), off(eng2))). 

Oriority_set({land(pos), land(pract)}). 

priority_set({land(slope), iand(high_speed), 
ijand(max_weight), iland(siliding), iand(steep), 


land(normal))). 


Dpriority_set{{power(none), power(iow), power(decrease), 
oower(increase)])). 


Drioritv_set([power(none), power(low), power(ok))). 
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LEEK KERR KERR REESE test Cases >3>>>>>5>>>3379359>9395%/ 


/* testl normal state */ 
test1l(Oplist,Goalstate) :- problem_solver 
( (€ revs(rotor,ok), full(fuel), engaged(scas), on(ecu), 
off(rain_rmv), off(master_arm), landing_zone(clear), 
full(throttlel), full(throttle2), off(master_ caution), 
automatic(govl), automatic(gov2), on(fuell), on(fuel2), 
normal(fuel_press), torque(engl,ok), torque(eng2,0k), 
torque(xmsn,ok), revs(ngl,ok), revs(ng2,0k), revs(nf1,ok), 
revs(nf£2,o0k), oil temp(engl,ok), oil _temp(eng2,ok), 


oil _press(engl,ok), oil_press(eng2,0k), on(genl), on(gen2), 
oil_temp(c_box,ok), oil_press(c_box,ok), oil_temp(xmsn,ok), 


Oil press(xmsn,ok), ammeter (genl,ok), ammeter (gen2,0k), 
fuel press(ok), itt(engl,ok), itt(eng2,ok), 
oil press(hyd_sys_1,ok), oil press(hyd_sys_2,0k), 


airsoeed(100), altitude(1000)}, 


Ovlist, Goalstate ). /* final state and how we got there */ 


/* test2 dual eng failure */ 


test2(Onlist,Goalistate) :- problem solver 

( ( oil_press(engl,none), oil _press(eng2,none), 
revs(rotor,low), off(rain_rmv), off(master_arm), 
landing_zone(clear), full(throttlel), full(throttle2), 
off(master_caution), automatic(govl), automatic(gov2), 
on(fuell), on(fuel2), normal(fuel_press), torque(engl,none), 
torque (eng2,none), torque (xmsn,low), revs(ngl,none), 
revs(ng2,none), revs(nfl,none), revs(n£2,none), 
oil _temp(engl,ok), oil temp(eng2,o0k), failed(genl), 
failed(gen2), full(fuel), off(scas), on(ecu), 
0il temp(c_box,ok), oil_press(c_box,ok), oil _temp(xmsn,ok), 
oil_press(xmsn,ok), ammeter(genl,none),ammeter(gen2,none), 
fuel press(ok), itt(engli,none), itt(eng2,none), 
oil _press(hyd_sys_1,ok), Ooil_press(hyd_sys_2,0k), 


airspeed(100), altitude(1000), left_yaw ], 


Oplist, Goalstate ). /* final state and how we got there */ 


/*®* test3 single eng failure */ 
test3(Oplist,Goalstate) :- problem solver 
(Coil _press(engi,none), oil _press(eng2,o0k), revs(rotor,low), 


off(rain_rmv), off£(master_arm), landing_zone(clear), 
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full(throttlel), full(throttle2), off(master_cautilon), 
automatic(govl), automatic(gov2), on(fuell), on(fuel2), 


normal(fuel_ press), torque(engl,none), torque (eng2,ok), 
torque (xmsn,low), revs(ngl,none), revs(ng2,0k), 
revs(nf1l,none), revs (nf£2,0k), oil _temp(engl,ok), 
oil temp(eng2,o0k), failed(genl), full(fuel), off(scas), 
on(ecu), oil _temp(c_box,ok), oil _press(c_box,ok), 
oil _temp(xmsn,ok), oil _press(xmsn,ok), ammeter(genl,none), 
ammeter(gen2,ok), fuel press(ok), itt(engl,none), 
itt(eng2,ok), oil_press(hyd_sys_1,ok), 
oil _press(hyd_sys_2,0k), airspced(100), altitude(1000), 
left_yaw ], 


Oplist, Goalstate ). /* final state and how we got there */ 
/* test4 single engl failure + nf2 gov failure */ 
test4(Oplist,Goalstate) :- problem_solver 


(foil _press(engl,none), oil_press(eng2,ok), revs(rotor,low), 
off({rain_rmv), off(master_arm), landing_zone(clear), 
full(throttiel), full(throttle2), off(master_caution), 
automatic(govl), automatic(gov2), on(fuell), on(fuel2), 
normal(rfuel press), torque(engli,none), torque(eng2,erratic), 
torque(xmsn,iow), torque(xmsn,erratic), revs(ngl,none), 
revs(ng2,erratic), revs(nfl,none), revs(nf2,erratic), 
oil_temp(engl,ok), oil_temp(eng2,0k), failed(genl), 
full( fuel), off(scas), on(ecu), oil temp(c_box,ok), 
oil press(c_box,ok), oil_temp(xmsn,ok), oil _press(xmsn, ok), 
ammeter (genl,none), ammeter(gen2,ok), fuel_press( ok ), 
itt(engi,none), itt(eng2,erratic), oil press(hyd_sys_1,ok), 
oil _press(hyd_sys_2,0k), airspeed(100), altitude(1000), 
left_yaw ], 


Oplist, Goalstate ). /* £inal state and how we got there */ 
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